diff options
author | Andrey Markovytch <andreym@codeaurora.org> | 2016-10-23 14:03:00 +0300 |
---|---|---|
committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2016-10-23 04:05:25 -0700 |
commit | edbf13e0f173b94b606959e9fa7426da9004ece9 (patch) | |
tree | 0ff3af1777a7ca9f4bc52083983b55d126155795 /msmcobalt/init-qcom-fbe-sh.te | |
parent | 22cbbd8e94223fb1970bc88724682cc48e231942 (diff) | |
download | android_device_qcom_sepolicy-edbf13e0f173b94b606959e9fa7426da9004ece9.tar.gz android_device_qcom_sepolicy-edbf13e0f173b94b606959e9fa7426da9004ece9.tar.bz2 android_device_qcom_sepolicy-edbf13e0f173b94b606959e9fa7426da9004ece9.zip |
sepolicy: added policy fixes for FBE to work properly
FBE needs changes in sepolicy
CRs-Fixed: 1081232
Change-Id: I63095a37ce04b500a791a59002ae478d76e8218d
Diffstat (limited to 'msmcobalt/init-qcom-fbe-sh.te')
-rw-r--r-- | msmcobalt/init-qcom-fbe-sh.te | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/msmcobalt/init-qcom-fbe-sh.te b/msmcobalt/init-qcom-fbe-sh.te new file mode 100644 index 00000000..2eba9da1 --- /dev/null +++ b/msmcobalt/init-qcom-fbe-sh.te @@ -0,0 +1,36 @@ +# Copyright (c) 2016, The Linux Foundation. All rights reserved. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following +# disclaimer in the documentation and/or other materials provided +# with the distribution. +# * Neither the name of The Linux Foundation nor the names of its +# contributors may be used to endorse or promote products derived +# from this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT +# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS +# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN +# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +type init-qcom-fbe-sh, domain; +type init-qcom-fbe-sh_exec, exec_type, file_type; + +init_daemon_domain(init-qcom-fbe-sh) + +allow init-qcom-fbe-sh shell_exec:file rx_file_perms; + +# execute toybox/toolbox +allow init-qcom-fbe-sh toolbox_exec:file rx_file_perms; |