Files
device_google_wahoo/sepolicy/init-devstart-sh.te
Sandeep Patil 59b3eaccd3 tag all vendor domains that rely on system executables
Bug: 36463595
Test: lunch walleye-userdebug && make sepolicy

Change-Id: I7ec48b3109d66f9537e5834933ed28aa76da367e
Signed-off-by: Sandeep Patil <sspatil@google.com>
2017-04-15 19:30:07 -07:00

16 lines
513 B
Plaintext

type init-qcom-devstart-sh, domain, vendor_executes_system_violators;
type init-qcom-devstart-sh_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init-qcom-devstart-sh)
allow init-qcom-devstart-sh shell_exec:file rx_file_perms;
# execute toybox/toolbox
allow init-qcom-devstart-sh toolbox_exec:file rx_file_perms;
# Set the sys.qcom.devup property
set_prop(init-qcom-devstart-sh, system_prop)
# Set boot_adsp and boot_slpi to 1
allow init-qcom-devstart-sh sysfs_msm_subsys:file w_file_perms;