summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorVishal Bhoj <vishal.bhoj@linaro.org>2014-11-20 12:39:13 +0000
committerLinaro Android Code Review <android-review@review.linaro.org>2014-11-20 12:39:13 +0000
commit479e75b8ffd815724a87b4be2bf25dea5670f183 (patch)
treeca0270afd45457b90bb70c818d6e842b9bbdf064
parent851075004e660eb281249dcb157691a6e41f43b3 (diff)
parentb9410bfbb106e275e97458bad660a384820d9352 (diff)
downloadcommon-479e75b8ffd815724a87b4be2bf25dea5670f183.tar.gz
Merge "sepolicy: add sepolicies to make gatord run in permissive mode" into linaro-lollipop-experimental
-rw-r--r--sepolicy/gatord.te3
-rw-r--r--sepolicy/init.te2
-rw-r--r--sepolicy/logd.te1
3 files changed, 6 insertions, 0 deletions
diff --git a/sepolicy/gatord.te b/sepolicy/gatord.te
new file mode 100644
index 0000000..2943a9b
--- /dev/null
+++ b/sepolicy/gatord.te
@@ -0,0 +1,3 @@
+type gatord, domain, mlstrustedsubject;
+
+permissive gatord;
diff --git a/sepolicy/init.te b/sepolicy/init.te
index b51f08f..c7b980b 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -1,3 +1,5 @@
userdebug_or_eng(`
allow init su:process { transition dyntransition rlimitinh siginh };
')
+allow init self:tcp_socket create;
+allow init gatord:process { transition rlimitinh siginh };
diff --git a/sepolicy/logd.te b/sepolicy/logd.te
index ece4edf..a99d8bd 100644
--- a/sepolicy/logd.te
+++ b/sepolicy/logd.te
@@ -1 +1,2 @@
allow logd property_socket:sock_file write;
+allow logd init:unix_stream_socket connectto;