• Tianjie Xu's avatar
    Add 'system' to update_verifier's gid · 128e7715
    Tianjie Xu authored
    This addresses the denial to /dev/cpuset/tasks:
    update_verifier: type=1400 audit(0.0:377): avc: denied { dac_override }
    for capability=1 scontext=u:r:update_verifier:s0
    tcontext=u:r:update_verifier:s0 tclass=capability permissive=1
    update_verifier: type=1400 audit(0.0:378): avc: granted { write } for
    name="tasks" dev="cgroup" ino=5 scontext=u:r:update_verifier:s0
    tcontext=u:object_r:cgroup:s0 tclass=file
    Bug: 37358323
    Test: denial message gone after adding system group
    Change-Id: I66b4925295a13fbc1c6f26a1bb9bd2f9cebcec3d
    (cherry-picked from 0ad2de5e)
Last commit
Last update
Android.mk Loading commit data...
update_verifier.cpp Loading commit data...
update_verifier.rc Loading commit data...