Skip to content
Snippets Groups Projects
Commit e5e98aef authored by Alex Klyubin's avatar Alex Klyubin
Browse files

resolved conflicts for merge of 77ec892b to jb-mr2-dev-plus-aosp

Change-Id: Ia9f34580a35d3f5ff7ea0ac9a3784d2650e61b6a
parents 8eb7d672 77ec892b
No related branches found
No related tags found
No related merge requests found
......@@ -49,6 +49,7 @@ type uhid_device, dev_type;
type tun_device, dev_type, mlstrustedobject;
type usbaccessory_device, dev_type;
type usb_device, dev_type;
type klog_device, dev_type;
type properties_device, dev_type;
# All devices have a uart for the hci
......
......@@ -114,6 +114,7 @@
/dev/watchdog u:object_r:watchdog_device:s0
/dev/xt_qtaguid u:object_r:qtaguid_device:s0
/dev/zero u:object_r:zero_device:s0
/dev/__kmsg__ u:object_r:klog_device:s0
/dev/__properties__ u:object_r:properties_device:s0
#############################
# System files
......
......@@ -285,6 +285,17 @@ define(`access_kmsg', `
allow $1 kernel:system syslog_read;
')
#####################################
# write_klog(domain)
# Ability to write to kernel log via
# klog_write()
# See system/core/libcutil/klog.c
define(`write_klog', `
type_transition $1 device:chr_file klog_device "__kmsg__";
allow $1 klog_device:chr_file { create open write unlink };
allow $1 device:dir { add_name remove_name };
')
#####################################
# Non system_app application set
#
......
......@@ -2,6 +2,7 @@
# it lives in the rootfs and has no unique file type.
type ueventd, domain;
tmpfs_domain(ueventd)
write_klog(ueventd)
security_access_policy(ueventd)
allow ueventd rootfs:file entrypoint;
allow ueventd init:process sigchld;
......
......@@ -32,6 +32,8 @@ allow vold self:capability { sys_boot };
# XXX Label sysfs files with a specific type?
allow vold sysfs:file rw_file_perms;
write_klog(vold)
#
# Rules to support encrypted fs support.
#
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment