summaryrefslogtreecommitdiffstats
path: root/common/te_macros
diff options
context:
space:
mode:
authorLinux Build Service Account <lnxbuild@localhost>2016-09-12 22:14:03 -0700
committerGerrit - the friendly Code Review server <code-review@localhost>2016-09-12 22:14:03 -0700
commit952d39556be6417579b39e16d09dd283aec61022 (patch)
tree4ed13f78b8caefc1e7a1c0bca4a3fdba30050167 /common/te_macros
parentfec07fe5ce6c0268cf7a495fa377626bd481ae88 (diff)
parent277acbba3c7adbb01364f738638a23b1b8674311 (diff)
downloadandroid_device_qcom_sepolicy-952d39556be6417579b39e16d09dd283aec61022.tar.gz
android_device_qcom_sepolicy-952d39556be6417579b39e16d09dd283aec61022.tar.bz2
android_device_qcom_sepolicy-952d39556be6417579b39e16d09dd283aec61022.zip
Merge "sepolicy: Restrict diag access available to domains"
Diffstat (limited to 'common/te_macros')
-rw-r--r--common/te_macros6
1 files changed, 6 insertions, 0 deletions
diff --git a/common/te_macros b/common/te_macros
index e232bb5a..4fd7b62b 100644
--- a/common/te_macros
+++ b/common/te_macros
@@ -53,3 +53,9 @@ allow dpmd $1:file r_file_perms;
allow dpmd $1:fd use;
allow dpmd $1:tcp_socket rw_socket_perms;
')
+#####################################
+# diag_use(clientdomain)
+# allow clientdomain to read/write to diag
+define(`diag_use', `
+allow $1 diag_device:chr_file rw_file_perms;
+')