Commits

Robert Craig  committed c459653

Update selinux policy.

Small number of changes addressing
new denials seen with 4.3

Change-Id: I589bec371d2dbdf6cb4f03d949a1546e947acd86
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

  • Participants
  • Parent commits 11d6429
  • Branches seandroid-4.3

Comments (0)

Files changed (5)

File BoardConfig.mk

         device.te \
         drmserver.te \
         file.te \
+        gpsd.te \
+        init_shell.te \
+        keystore.te \
         mediaserver.te \
         sensors_config.te \
-        shell.te \
         surfaceflinger.te \
         system.te \
         zygote.te

File sepolicy/gpsd.te

+allow gpsd self:process execmem;

File sepolicy/init_shell.te

+allow init_shell sysfs_firmware_writable:file w_file_perms;

File sepolicy/keystore.te

+allow keystore self:process execmem;

File sepolicy/shell.te

-allow shell sysfs_firmware_writable:file w_file_perms;