pa-fazil
/
android_build
mirror of https://github.com/fazilsheik96/android_build.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
android_build/target/board/generic/sepolicy/qemud.te

9 lines
180 B
Plaintext
Raw Normal View History

Move qemud and /dev/qemu policy bits to emulator-specific sepolicy. Change-Id: I620d4aef84a5d4565abb1695db54ce1653612bce Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2014-02-25 18:37:06 +00:00
# qemu support daemon
type qemud, domain;
type qemud_exec, exec_type, file_type;
init_daemon_domain(qemud)
Switch qemud to permissive_or_unconfined(). Switch the qemud domain from unconfined_domain() to permissive_or_unconfined() so that we can start collecting and addressing denials in -userdebug/-eng builds. Also allow access to the serial device. Change-Id: I9c7a6ddc8c2e64bfc6c5bb896eed1729ab205d60 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2014-11-06 14:36:40 +00:00
# Access /dev/ttyS1.
allow qemud serial_device:chr_file rw_file_perms;