Skip to content
Snippets Groups Projects
Commit 6991a930 authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "Allow vendor_init to write to misc_block_device" into pi-dev

parents e8c2d189 1f6018ea
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
public/domain.te
+ 1
− 0
View file @ 6991a930
...@@ -600,6 +600,7 @@ neverallow { ...@@ -600,6 +600,7 @@ neverallow {
-init -init
-uncrypt -uncrypt
-update_engine -update_engine
-vendor_init
-vold -vold
-recovery -recovery
-ueventd -ueventd
......
public/vendor_init.te
+ 3
− 0
View file @ 6991a930
...@@ -146,6 +146,9 @@ allow vendor_init serialno_prop:file { getattr open read }; ...@@ -146,6 +146,9 @@ allow vendor_init serialno_prop:file { getattr open read };
# Vendor init can perform operations on trusted and security Extended Attributes # Vendor init can perform operations on trusted and security Extended Attributes
allow vendor_init self:global_capability_class_set sys_admin; allow vendor_init self:global_capability_class_set sys_admin;
# Raw writes to misc block device
allow vendor_init misc_block_device:blk_file w_file_perms;
not_compatible_property(` not_compatible_property(`
set_prop(vendor_init, { set_prop(vendor_init, {
property_type property_type
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment