diff options
author | Nick Bray <ncbray@google.com> | 2017-04-17 14:51:00 -0700 |
---|---|---|
committer | Nick Bray <ncbray@google.com> | 2017-04-17 15:19:44 -0700 |
commit | 1da868148d75fb8deca717352fb243bcbf260e68 (patch) | |
tree | 5f71312d5cda51235e89c218f35e23214fb25226 | |
parent | 850f8473e581b48cfc06de0089cd0e3e02e34eb4 (diff) | |
download | device_google_vrservices-1da868148d75fb8deca717352fb243bcbf260e68.tar.gz device_google_vrservices-1da868148d75fb8deca717352fb243bcbf260e68.tar.bz2 device_google_vrservices-1da868148d75fb8deca717352fb243bcbf260e68.zip |
Change levelFrom=all to levelFrom=user
VrCore was trying to access .../com.google.android.gms/app_chimera, and
this was causing an avc denial due to multi-level security.
Bug: 36367417
Test: can pair controler
Change-Id: I5b79dc279f099a29bc1957110fa8bea1cdcd652c
-rw-r--r-- | vrcore/sepolicy/seapp_contexts | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/vrcore/sepolicy/seapp_contexts b/vrcore/sepolicy/seapp_contexts index 7d28d38..229d486 100644 --- a/vrcore/sepolicy/seapp_contexts +++ b/vrcore/sepolicy/seapp_contexts @@ -1,4 +1,4 @@ # The default domain for vrcore processes. -user=_app seinfo=vrcore name=com.google.vr.vrcore* domain=vrcore_app type=app_data_file levelFrom=all +user=_app seinfo=vrcore name=com.google.vr.vrcore* domain=vrcore_app type=app_data_file levelFrom=user # A fallback in case vrcore is missing something critical that untrusted_app provides. -user=_app seinfo=vrcore name=com.google.vr.vrcore:app domain=untrusted_app type=app_data_file levelFrom=all +user=_app seinfo=vrcore name=com.google.vr.vrcore:app domain=untrusted_app type=app_data_file levelFrom=user |