Skip to content
Snippets Groups Projects
Commit 6875f9d1 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Merge "adbd/shell: grant access to sepolicy for cts" into oc-dev am: bab5872c 

am: 2afd3383

Change-Id: I8447d7aeefdfd314244c16c223b23219fd95bbc4
parents b5efa1c8 2afd3383
No related branches found
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
private/adbd.te
+ 2
− 0
View file @ 6875f9d1
......@@ -103,6 +103,8 @@ allow adbd kernel:security read_policy;
allow adbd service_contexts_file:file r_file_perms;
allow adbd file_contexts_file:file r_file_perms;
allow adbd seapp_contexts_file:file r_file_perms;
allow adbd property_contexts_file:file r_file_perms;
allow adbd sepolicy_file:file r_file_perms;
allow adbd surfaceflinger_service:service_manager find;
allow adbd bootchart_data_file:dir search;
......
public/shell.te
+ 7
− 0
View file @ 6875f9d1
......@@ -147,6 +147,13 @@ allow shell proc:lnk_file getattr;
#
allow shell dev_type:blk_file getattr;
# read selinux policy files
allow shell file_contexts_file:file r_file_perms;
allow shell property_contexts_file:file r_file_perms;
allow shell seapp_contexts_file:file r_file_perms;
allow shell service_contexts_file:file r_file_perms;
allow shell sepolicy_file:file r_file_perms;
###
### Neverallow rules
###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment