Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
S
sepolicy
Manage
Activity
Members
Plan
Wiki
Code
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Deploy
Releases
Package Registry
Model registry
Operate
Terraform modules
Analyze
Contributor analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
CodeLinaro
public-release-test
platform
system
sepolicy
Commits
6f324ffd
Commit
6f324ffd
authored
6 years ago
by
Hongyi Zhang
Committed by
Gerrit Code Review
6 years ago
Browse files
Options
Downloads
Plain Diff
Merge "grant permissions of dir /data/server_configurable_flags"
parents
7e44292e
4aecb3f2
No related branches found
No related tags found
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
public/flags_heatlh_check.te
+1
-1
1 addition, 1 deletion
public/flags_heatlh_check.te
with
1 addition
and
1 deletion
public/flags_heatlh_check.te
+
1
−
1
View file @
6f324ffd
...
@@ -9,6 +9,7 @@ set_prop(flags_health_check, device_config_reset_performed_prop)
...
@@ -9,6 +9,7 @@ set_prop(flags_health_check, device_config_reset_performed_prop)
# device_config_flags_health_check_prop before release. (b/119627143)
# device_config_flags_health_check_prop before release. (b/119627143)
set_prop(flags_health_check, device_config_flags_health_check_prop)
set_prop(flags_health_check, device_config_flags_health_check_prop)
allow flags_health_check server_configurable_flags_data_file:dir rw_dir_perms;
allow flags_health_check server_configurable_flags_data_file:file create_file_perms;
allow flags_health_check server_configurable_flags_data_file:file create_file_perms;
# system property device_config_boot_count_prop is used for deciding when to perform server
# system property device_config_boot_count_prop is used for deciding when to perform server
...
@@ -25,5 +26,4 @@ neverallow { domain -init -flags_health_check } device_config_reset_performed_pr
...
@@ -25,5 +26,4 @@ neverallow { domain -init -flags_health_check } device_config_reset_performed_pr
# server_configurable_flags_data_file is used for storing whether server configurable flags which
# server_configurable_flags_data_file is used for storing whether server configurable flags which
# have been reset during current booting. Mistakenly modified by unrelated components can
# have been reset during current booting. Mistakenly modified by unrelated components can
# cause bad server configurable flags synced back to device.
# cause bad server configurable flags synced back to device.
neverallow { domain -init -flags_health_check } server_configurable_flags_data_file:file no_w_file_perms;
neverallow { domain -init -flags_health_check } server_configurable_flags_data_file:file no_w_file_perms;
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment