diff options
| author | Ji-Hwan Lee <jihwan@google.com> | 2014-05-19 17:01:10 +0000 |
|---|---|---|
| committer | Android Git Automerger <android-git-automerger@android.com> | 2014-05-19 17:01:10 +0000 |
| commit | d9af5a545855f5919c6a8655c2011c9a9c0b30c7 (patch) | |
| tree | 65f92fca5d0df6cc958354f050f2abbf268ad47d /target/board/generic_x86 | |
| parent | 6772438d9250c23783a119e405f402e1f2b8d36f (diff) | |
| parent | d9f11a3f2b0670ac68bfae782c5fe8c58032efc6 (diff) | |
| download | build-d9af5a545855f5919c6a8655c2011c9a9c0b30c7.zip build-d9af5a545855f5919c6a8655c2011c9a9c0b30c7.tar.gz build-d9af5a545855f5919c6a8655c2011c9a9c0b30c7.tar.bz2 | |
am d9f11a3f: am c0f0e8ca: am 13b48588: Merge "Allow qemu_device read-write access to various processes"
* commit 'd9f11a3f2b0670ac68bfae782c5fe8c58032efc6':
Allow qemu_device read-write access to various processes
Diffstat (limited to 'target/board/generic_x86')
| -rw-r--r-- | target/board/generic_x86/BoardConfig.mk | 3 | ||||
| -rw-r--r-- | target/board/generic_x86/sepolicy/app.te | 1 | ||||
| -rw-r--r-- | target/board/generic_x86/sepolicy/bootanim.te | 1 | ||||
| -rw-r--r-- | target/board/generic_x86/sepolicy/surfaceflinger.te | 1 | ||||
| -rw-r--r-- | target/board/generic_x86/sepolicy/zygote.te | 1 |
5 files changed, 7 insertions, 0 deletions
diff --git a/target/board/generic_x86/BoardConfig.mk b/target/board/generic_x86/BoardConfig.mk index faf8600..727d3db 100644 --- a/target/board/generic_x86/BoardConfig.mk +++ b/target/board/generic_x86/BoardConfig.mk @@ -44,7 +44,9 @@ TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true BOARD_SEPOLICY_DIRS += build/target/board/generic_x86/sepolicy BOARD_SEPOLICY_UNION += \ + app.te \ adbd.te \ + bootanim.te \ device.te \ domain.te \ file.te \ @@ -55,5 +57,6 @@ BOARD_SEPOLICY_UNION += \ qemud.te \ rild.te \ shell.te \ + surfaceflinger.te \ system_server.te \ zygote.te diff --git a/target/board/generic_x86/sepolicy/app.te b/target/board/generic_x86/sepolicy/app.te new file mode 100644 index 0000000..fd33453 --- /dev/null +++ b/target/board/generic_x86/sepolicy/app.te @@ -0,0 +1 @@ +allow appdomain qemu_device:chr_file rw_file_perms; diff --git a/target/board/generic_x86/sepolicy/bootanim.te b/target/board/generic_x86/sepolicy/bootanim.te new file mode 100644 index 0000000..762a573 --- /dev/null +++ b/target/board/generic_x86/sepolicy/bootanim.te @@ -0,0 +1 @@ +allow bootanim qemu_device:chr_file rw_file_perms; diff --git a/target/board/generic_x86/sepolicy/surfaceflinger.te b/target/board/generic_x86/sepolicy/surfaceflinger.te new file mode 100644 index 0000000..865405c --- /dev/null +++ b/target/board/generic_x86/sepolicy/surfaceflinger.te @@ -0,0 +1 @@ +allow surfaceflinger qemu_device:chr_file rw_file_perms; diff --git a/target/board/generic_x86/sepolicy/zygote.te b/target/board/generic_x86/sepolicy/zygote.te index 93993a4..d34c4a1 100644 --- a/target/board/generic_x86/sepolicy/zygote.te +++ b/target/board/generic_x86/sepolicy/zygote.te @@ -1,2 +1,3 @@ allow zygote self:process execmem; allow zygote self:capability sys_nice; +allow zygote qemu_device:chr_file rw_file_perms; |