diff options
| author | Sanket Khidkikar <sanketk@codeaurora.org> | 2015-10-05 20:26:00 -0700 |
|---|---|---|
| committer | Moyster <oysterized@gmail.com> | 2018-01-31 16:46:12 +0100 |
| commit | be1e10f0f36c3a1737718e243660c41aab71f24e (patch) | |
| tree | 546cf8dce38daa93d2b12989f0ae735e21e351bd | |
| parent | 288642ca49c75220a23c0c3f9d5f1d94b5aa0125 (diff) | |
sepolicy: Remove noatsecure for init processes
* Certain domain needs LD_PRELOAD passed from init. Allow it
for most domain.
Change-Id: I7b78620d64af15ca4690abf49e4c24f0b0d5be9a
Signed-off-by: Moyster <oysterized@gmail.com>
| -rw-r--r-- | sepolicy/init.te | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/sepolicy/init.te b/sepolicy/init.te index 3afeef5..dacc58a 100644 --- a/sepolicy/init.te +++ b/sepolicy/init.te @@ -13,3 +13,8 @@ allow init perf_control_sysfs:file getattr; allow init tmpfs:lnk_file { create unlink }; allow init wmtWifi_device:chr_file write; + +# Certain domains needs LD_PRELOAD passed from init +# allow it for most domain. Do not honor LD_PRELOAD +# for lmkd +allow init { domain -lmkd }:process noatsecure; |