OSDN Git Service

goldfish_setup: grant /system/bin/sh exec access
authorNick Kralevich <nnk@google.com>
Wed, 25 May 2016 00:36:23 +0000 (17:36 -0700)
committerNick Kralevich <nnk@google.com>
Thu, 9 Jun 2016 16:52:39 +0000 (09:52 -0700)
commit03bfdea1a3c7c502517ef9268a51341422e81e06
tree6ca92f5ed2e7372f2535cab673ab263fc71caa90
parente5c1af2dd0bf003a2fdb6aedf0e635569f597a9a
goldfish_setup: grant /system/bin/sh exec access

The goldfish_setup shell script needs the ability to execute
the shell script interpreter. Allow it.

Addresses the following denial:

avc: denied { getattr } for pid=1220 comm="init.goldfish.s"
path="/system/bin/sh" dev="vda" ino=442 scontext=u:r:goldfish_setup:s0
tcontext=u:object_r:shell_exec:s0 tclass=file permissive=0

(cherrypicked from commit 501c88c0290eb2308c110398f106411260863bb8)

Bug: 28941573
Change-Id: I22d26e90f107c8d801229354a5e0513c37e6c31d
target/board/generic/sepolicy/goldfish_setup.te