Pierre-Hugues Husson | 8a07d2c | 2018-02-16 22:41:03 +0100 | [diff] [blame] | 1 | type vndk_detect, coredomain, domain; |
| 2 | type vndk_detect_exec, exec_type, file_type; |
| 3 | |
| 4 | init_daemon_domain(vndk_detect); |
| 5 | allow vndk_detect sepolicy_file:file r_file_perms; |
| 6 | set_prop(vndk_detect,system_prop); |
| 7 | |
| 8 | allow vndk_detect shell_exec:file rx_file_perms; |
| 9 | allow vndk_detect toolbox_exec:file rx_file_perms; |
| 10 | #/system/bin/grep |
| 11 | allow vndk_detect system_file:file rx_file_perms; |
Pierre-Hugues Husson | 2886155 | 2018-02-19 00:06:31 +0100 | [diff] [blame^] | 12 | |
| 13 | #mount -o bind /system/bin/adbd /sbin/adbd |
| 14 | allow vndk_detect adbd_exec:file { getattr }; |
| 15 | allow vndk_detect rootfs:file { mounton getattr }; |
| 16 | allow vndk_detect self:capability { sys_admin }; |