summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNick Kralevich <nnk@google.com>2015-08-25 22:42:53 +0000
committerGerrit Code Review <noreply-gerritcodereview@google.com>2015-08-25 22:42:53 +0000
commit642ca250402793b71b66686003605c7a6fdeebc9 (patch)
treeb3651801183ebf3c1e042a3b85bab750b7cccb8e
parent43e26c2412a4e695013e7c9b3a89cc6994c2ccb5 (diff)
parentaf73edbc440e649b4e6085fedb40af5b80cb5e2f (diff)
downloadgrouper-master.tar.gz
Merge "Only allow toolbox exec where /system exec was already allowed."HEADmastermain
-rw-r--r--sepolicy/sensors_config.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/sepolicy/sensors_config.te b/sepolicy/sensors_config.te
index 1a42a44..f4bd77d 100644
--- a/sepolicy/sensors_config.te
+++ b/sepolicy/sensors_config.te
@@ -10,6 +10,7 @@ file_type_auto_trans(sensors_config, system_data_file, sensors_data_file)
# Execute toolbox commands
allow sensors_config shell_exec:file rx_file_perms;
allow sensors_config system_file:file execute_no_trans;
+allow sensors_config toolbox_exec:file rx_file_perms;
# Mount /dev/block/platform/sdhci-tegra.3/by-name/PER
allow sensors_config sensors_data_file:dir mounton;