diff options
| author | Niranjan Reddy Dumbala <dnreddy@codeaurora.org> | 2017-06-15 18:04:31 +0530 |
|---|---|---|
| committer | Niranjan Reddy Dumbala <dnreddy@codeaurora.org> | 2017-06-15 18:04:31 +0530 |
| commit | 18eafb2096b7b87eecde278e2ad432171947b5da (patch) | |
| tree | 09615f563e3d4333781d7ec94c37e52b32cabf76 /sdm660 | |
| parent | 7485ee5c0426ebb734741841af1912a09e179061 (diff) | |
| download | android_device_qcom_sepolicy-18eafb2096b7b87eecde278e2ad432171947b5da.tar.gz android_device_qcom_sepolicy-18eafb2096b7b87eecde278e2ad432171947b5da.tar.bz2 android_device_qcom_sepolicy-18eafb2096b7b87eecde278e2ad432171947b5da.zip | |
SDM660: update sepolicy for fbe.
Change-Id: I5d72deee66ae2c751005358e988a1a0350117e25
Diffstat (limited to 'sdm660')
| -rw-r--r-- | sdm660/init-qti-fbe-sh.te | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/sdm660/init-qti-fbe-sh.te b/sdm660/init-qti-fbe-sh.te index 2fcc604f..a3403bf7 100644 --- a/sdm660/init-qti-fbe-sh.te +++ b/sdm660/init-qti-fbe-sh.te @@ -1,4 +1,4 @@ -# Copyright (c) 2016, The Linux Foundation. All rights reserved. +# Copyright (c) 2016,2017 The Linux Foundation. All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions are @@ -26,12 +26,13 @@ # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. type init-qti-fbe-sh, domain; -type init-qti-fbe-sh_exec, exec_type, file_type; +type init-qti-fbe-sh_exec, exec_type, file_type, vendor_file_type; init_daemon_domain(init-qti-fbe-sh) -allow init-qti-fbe-sh shell_exec:file rx_file_perms; +not_full_treble(`allow init-qti-fbe-sh shell_exec:file rx_file_perms;') +full_treble_only(`allow init-qti-fbe-sh vendor_shell_exec:file rx_file_perms;') # execute toybox/toolbox -allow init-qti-fbe-sh toolbox_exec:file rx_file_perms; -allow init-qti-fbe-sh rootfs:lnk_file getattr; +not_full_treble(`allow init-qti-fbe-sh toolbox_exec:file rx_file_perms;') +full_treble_only(`allow init-qti-fbe-sh vendor_toolbox_exec:file rx_file_perms;') |