Merge "init_ese: use vendor shell and toybox in ese script" into oc-dr1-dev

This commit is contained in:
TreeHugger Robot
2017-06-20 00:48:41 +00:00
committed by Android (Google) Code Review

View File

@@ -1,13 +1,12 @@
# /vendor/bin/ese_load init called shell script.
# TODO: Update system_violators for b/38447496
type init_ese, domain, vendor_executes_system_violators;
type init_ese, domain;
type init_ese_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init_ese)
# Shell script exec (toolbox)
allow init_ese shell_exec:file r_file_perms;
allow init_ese toolbox_exec:file rx_file_perms;
allow init_ese vendor_shell_exec:file r_file_perms;
allow init_ese vendor_toolbox_exec:file rx_file_perms;
# eSE tools
allow init_ese esed_exec:file rx_file_perms;