From a34cfe7b565e12ff6459038e99089a7137a655ff Mon Sep 17 00:00:00 2001
From: Emilian Peev <epeev@google.com>
Date: Fri, 21 Dec 2018 17:31:47 +0000
Subject: [PATCH] sepolicy: Add "rs" and "rs_exec" to public policy
Add "rs" and "rs_exec" types to public policy. Access
to these types might be needed for device specific
customization.
Bug: 121306110
Test: Manual using application
Change-Id: Ief35d3353625adfbf468447de74aa80651dd9451
---
private/compat/28.0/28.0.ignore.cil | 2 ++
private/rs.te | 3 ---
public/rs.te | 2 ++
3 files changed, 4 insertions(+), 3 deletions(-)
create mode 100644 public/rs.te
diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil
index 0e1b41484..9178ac921 100644
--- a/private/compat/28.0/28.0.ignore.cil
+++ b/private/compat/28.0/28.0.ignore.cil
@@ -68,6 +68,8 @@
permissionmgr_service
recovery_socket
role_service
+ rs
+ rs_exec
rss_hwm_reset
rss_hwm_reset_exec
runtime_service
diff --git a/private/rs.te b/private/rs.te
index 9229ed949..56f8dfcc7 100644
--- a/private/rs.te
+++ b/private/rs.te
@@ -1,6 +1,3 @@
-type rs, domain, coredomain;
-type rs_exec, system_file_type, exec_type, file_type;
-
# Any files which would have been created as app_data_file
# will be created as rs_data_file instead.
allow rs app_data_file:dir ra_dir_perms;
diff --git a/public/rs.te b/public/rs.te
new file mode 100644
index 000000000..16b6e9630
--- /dev/null
+++ b/public/rs.te
@@ -0,0 +1,2 @@
+type rs, domain, coredomain;
+type rs_exec, system_file_type, exec_type, file_type;
--
GitLab