Treble-ize tmpfs access

Declare *_tmpfs types for all vendor domains which need it.

Bug: 122854450
Test: Sepolicy-build tests
Test: build taimen-userdebug
Change-Id: Ifd18eea5cac0a21f5fe1e27212e35d71762a9905
This commit is contained in:
Jeff Vander Stoep
2019-01-25 12:55:18 -08:00
parent 21c0786784
commit 4a137c011f
14 changed files with 15 additions and 1 deletions

View File

@@ -1,4 +1,5 @@
type wfc_activation_app, domain, coredomain;
type wfc_activation_app_tmpfs, file_type;
app_domain(wfc_activation_app)
net_domain(wfc_activation_app)

View File

@@ -1 +1,2 @@
type dataservice_app, domain;
type dataservice_app, domain;
type dataservice_app_tmpfs, file_type;

View File

@@ -1,5 +1,6 @@
# ConnectivityMonitor app
type con_monitor_app, domain;
type con_monitor_app_tmpfs, file_type;
app_domain(con_monitor_app)

View File

@@ -1,4 +1,5 @@
type easelservice_app, domain;
type easelservice_app_tmpfs, file_type;
app_domain(easelservice_app)

View File

@@ -1,4 +1,5 @@
type google_camera_app, domain, coredomain;
type google_camera_app_tmpfs, file_type;
app_domain(google_camera_app)
net_domain(google_camera_app)

View File

@@ -1,4 +1,5 @@
type hardware_info_app, domain;
type hardware_info_app_tmpfs, file_type;
app_domain(hardware_info_app)

View File

@@ -1,4 +1,5 @@
type logger_app, domain;
type logger_app_tmpfs, file_type;
userdebug_or_eng(`
app_domain(logger_app)

View File

@@ -1,4 +1,5 @@
type mds_app, domain;
type mds_app_tmpfs, file_type;
app_domain(mds_app)

View File

@@ -1,5 +1,6 @@
# Qualcomm telephony apps, such as AtFwd and FastDormancy
type qtelephony, domain;
type qtelephony_tmpfs, file_type;
app_domain(qtelephony)

View File

@@ -1,4 +1,5 @@
type ramdump_app, domain;
type ramdump_app_tmpfs, file_type;
userdebug_or_eng(`
app_domain(ramdump_app)

View File

@@ -1,5 +1,6 @@
# SSRestartDetector app
type ssr_detector_app, domain;
type ssr_detector_app_tmpfs, file_type;
app_domain(ssr_detector_app)

View File

@@ -1,4 +1,5 @@
type tango_core, domain, coredomain;
type tango_core_tmpfs, file_type;
app_domain(tango_core)
#from system/sepolicy/private/untrusted_app.te

View File

@@ -1,4 +1,5 @@
type timeservice_app, domain;
type timeservice_app_tmpfs, file_type;
app_domain(timeservice_app);
allow timeservice_app app_api_service:service_manager find;

View File

@@ -1,4 +1,5 @@
type obdm_app, domain, coredomain;
type obdm_app_tmpfs, file_type;
app_domain(obdm_app)
net_domain(obdm_app)