Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 154657f0 authored by Nick Kralevich's avatar Nick Kralevich Committed by Gerrit Code Review
Browse files

Merge "sepolicy: Fix 'avc denied' issues for the emulators"

parents 66745738 36a76ec0

target/board/generic/sepolicy/domain.te

+2 −0
Original line number Diff line number Diff line 
# For /sys/qemu_trace files in the emulator.

allow domain sysfs_writable:file rw_file_perms;

allow domain qemu_device:chr_file rw_file_perms;



get_prop(domain, qemu_prop)

target/board/generic/sepolicy/goldfish_setup.te

+2 −0
Original line number Diff line number Diff line
@@ -13,6 +13,8 @@ allow goldfish_setup toolbox_exec:file rx_file_perms; 
allow goldfish_setup self:capability { net_admin net_raw };

allow goldfish_setup self:udp_socket create_socket_perms;



net_domain(goldfish_setup)



# Set net.eth0.dns*, debug.sf.nobootanimation

set_prop(goldfish_setup, system_prop)

set_prop(goldfish_setup, debug_prop)

target/board/generic/sepolicy/netd.te

0 → 100644
+1 −0
Original line number Diff line number Diff line 
dontaudit netd self:capability sys_module;