Skip to content
Snippets Groups Projects
Commit 54189c53 authored by Sandeep Patil's avatar Sandeep Patil
Browse files

sepolicy: fix comments around 'domain' access to search in /vendor


Effectively removes TODOs and finalizes the initial solution to allow
all domains access to 'vendor_file'.

Bug: 36681074
Test: Build and boot sailfish (no policy changes in the CL)

Change-Id: I50c05e20175c5273b34901809d967dd3e48bdb0e
Signed-off-by: default avatarSandeep Patil <sspatil@google.com>
parent f79d1904
No related branches found
No related tags found
No related merge requests found
...@@ -123,12 +123,9 @@ allow domain same_process_hal_file:file { execute read open getattr }; ...@@ -123,12 +123,9 @@ allow domain same_process_hal_file:file { execute read open getattr };
allow domain vendor_configs_file:dir r_dir_perms; allow domain vendor_configs_file:dir r_dir_perms;
allow domain vendor_configs_file:file { read open getattr }; allow domain vendor_configs_file:file { read open getattr };
# TODO: (b/36681074) - Remove after this is resolved
# TODO: (b/36680116, b/36656392, b/36681210) All need directory
# lookup to find / open their libraries
full_treble_only(` full_treble_only(`
# Everyone needs to lookup libraries in /vendor/lib(64) # This is required "most likely" for LD_LIBRARY_PATH
# through linker/loader. # (b/36681074)
allow domain vendor_file:dir { getattr search }; allow domain vendor_file:dir { getattr search };
# Allow reading and executing out of /vendor to all vendor domains # Allow reading and executing out of /vendor to all vendor domains
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment