diff options
| author | Ethan Chen <intervigil@gmail.com> | 2017-09-25 23:09:37 -0700 |
|---|---|---|
| committer | Demon Singur <demonsingur@gmail.com> | 2018-02-02 18:07:07 +0000 |
| commit | df555cc7d32e8f781c08ea4360084bdcd2d59edd (patch) | |
| tree | 8c1b845bfb31474026ab193c70543bbb8c00f51d | |
| parent | 0abfcb603a06c396b1e6f08571615728466b830f (diff) | |
sepolicy: Use noatsecure for everything
* Required to preserve LD_SHIM_LIBS throughout
the services to fully support SHIM libraries
* Introduced in device_qcom_sepolicy by commit:
"sepolicy: allow getopt for appdomain"
I7b78620d64af15ca4690abf49e4c24f0b0d5be9a
"Certain domain needs LD_PRELOAD passed from init.
Allow it for most domain."
Change-Id: I17095630043bbd5af4436cd5625a0fdc3480ed05
Signed-off-by: Adrian DC <radian.dc@gmail.com>
| -rw-r--r-- | sepolicy/init.te | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sepolicy/init.te b/sepolicy/init.te index 44b918c3..33bfdf76 100644 --- a/sepolicy/init.te +++ b/sepolicy/init.te @@ -1,2 +1,5 @@ # /sys/kernel/debug/tracing/tracing_on allow init debugfs:file rw_file_perms; + +# required for LD_SHIM_LIBS +allow init { domain -lmkd -crash_dump }:process noatsecure; |