drgreen/android_device_google_gs-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow insmod-sh to install kernel modules from system_dlkm

Browse Source 
reference:
https://source.android.com/docs/core/architecture/partitions/gki-partitions#selinux

Bug: 267429528
Change-Id: I7a675c0f089452379d5675a353fbfd866cfd3edc
Signed-off-by: Robin Peng <robinpeng@google.com>
This commit is contained in:
Robin Peng 2023-03-15 09:52:49 +00:00
parent 690480a880
commit f938468e2e
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
insmod/sepolicy/insmod-sh.te
View File

@ -3,6 +3,9 @@ type insmod-sh_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(insmod-sh)
allow insmod-sh self:capability sys_module;
allow insmod-sh system_dlkm_file:dir r_dir_perms;
allow insmod-sh system_dlkm_file:file r_file_perms;
allow insmod-sh system_dlkm_file:system module_load;
allow insmod-sh vendor_kernel_modules:system module_load;
allow insmod-sh vendor_toolbox_exec:file execute_no_trans;