universal7580: sepolicy: Use noatsecure for everything
authorEthan Chen <intervigil@gmail.com>
Tue, 26 Sep 2017 06:09:37 +0000 (23:09 -0700)
committerJan Altensen <info@stricted.net>
Thu, 15 Aug 2019 09:11:40 +0000 (11:11 +0200)
 * Required to preserve LD_SHIM_LIBS throughout
    the services to fully support SHIM libraries

 * Introduced in device_qcom_sepolicy by commit:

    "sepolicy: allow getopt for appdomain"
    I7b78620d64af15ca4690abf49e4c24f0b0d5be9a

    "Certain domain needs LD_PRELOAD passed from init.
     Allow it for most domain."

Change-Id: I17095630043bbd5af4436cd5625a0fdc3480ed05
Signed-off-by: Adrian DC <radian.dc@gmail.com>
Signed-off-by: Stricted <info@stricted.net>
sepolicy/init.te

index 7b47cdc63cdb9f1307a423566d57f85d79f4b716..51754568f12467eff9140b456adbe90db74f0390 100644 (file)
@@ -31,3 +31,5 @@ allow init sysfs_camera_writable:file { relabelto setattr };
 allow init sysfs_camera_writable:filesystem associate;
 
 unix_socket_connect(init, property, rild)
+
+allow init { domain -lmkd -crash_dump }:process noatsecure;