aboutsummaryrefslogtreecommitdiffstats
path: root/domain.te
diff options
context:
space:
mode:
authorStephen Smalley <sds@tycho.nsa.gov>2013-04-04 11:27:27 -0400
committerrepo sync <gcondra@google.com>2013-04-05 13:07:16 -0700
commit81fe5f7c0f47d48faa820ad5f8d3f4f44637a486 (patch)
treef9dd05ff325a669caddb21794aaadd007e0ed80c /domain.te
parent4e0e74ed95958c5acf59c5c07fa7e3648f71f34e (diff)
downloadandroid_external_sepolicy-81fe5f7c0f47d48faa820ad5f8d3f4f44637a486.tar.gz
android_external_sepolicy-81fe5f7c0f47d48faa820ad5f8d3f4f44637a486.tar.bz2
android_external_sepolicy-81fe5f7c0f47d48faa820ad5f8d3f4f44637a486.zip
Allow all domains to read the log devices.
Read access to /dev/log/* is no longer restricted. Filtering on reads is performed per-uid by the kernel logger driver. Change-Id: Ia986cbe66b84f3898e858c60f12c7f3d63ac47cf Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'domain.te')
-rw-r--r--domain.te2
1 files changed, 1 insertions, 1 deletions
diff --git a/domain.te b/domain.te
index a005943..1accf5d 100644
--- a/domain.te
+++ b/domain.te
@@ -50,7 +50,7 @@ allow domain binder_device:chr_file rw_file_perms;
allow domain ptmx_device:chr_file rw_file_perms;
allow domain powervr_device:chr_file rw_file_perms;
allow domain log_device:dir search;
-allow domain log_device:chr_file w_file_perms;
+allow domain log_device:chr_file rw_file_perms;
allow domain nv_device:chr_file rw_file_perms;
allow domain alarm_device:chr_file r_file_perms;
allow domain urandom_device:chr_file r_file_perms;