diff options
author | Linux Build Service Account <lnxbuild@localhost> | 2016-09-12 22:14:03 -0700 |
---|---|---|
committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2016-09-12 22:14:03 -0700 |
commit | 952d39556be6417579b39e16d09dd283aec61022 (patch) | |
tree | 4ed13f78b8caefc1e7a1c0bca4a3fdba30050167 /common/te_macros | |
parent | fec07fe5ce6c0268cf7a495fa377626bd481ae88 (diff) | |
parent | 277acbba3c7adbb01364f738638a23b1b8674311 (diff) | |
download | android_device_qcom_sepolicy-952d39556be6417579b39e16d09dd283aec61022.tar.gz android_device_qcom_sepolicy-952d39556be6417579b39e16d09dd283aec61022.tar.bz2 android_device_qcom_sepolicy-952d39556be6417579b39e16d09dd283aec61022.zip |
Merge "sepolicy: Restrict diag access available to domains"
Diffstat (limited to 'common/te_macros')
-rw-r--r-- | common/te_macros | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/common/te_macros b/common/te_macros index e232bb5a..4fd7b62b 100644 --- a/common/te_macros +++ b/common/te_macros @@ -53,3 +53,9 @@ allow dpmd $1:file r_file_perms; allow dpmd $1:fd use; allow dpmd $1:tcp_socket rw_socket_perms; ') +##################################### +# diag_use(clientdomain) +# allow clientdomain to read/write to diag +define(`diag_use', ` +allow $1 diag_device:chr_file rw_file_perms; +') |