aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavid Turner <digit@google.com>2016-06-10 18:04:26 +0000
committerGerrit Code Review <noreply-gerritcodereview@google.com>2016-06-10 18:04:26 +0000
commit7a866d783c495b91ab4f8b74e4765a500eb4149d (patch)
tree6ca92f5ed2e7372f2535cab673ab263fc71caa90
parente5c1af2dd0bf003a2fdb6aedf0e635569f597a9a (diff)
parent03bfdea1a3c7c502517ef9268a51341422e81e06 (diff)
downloadbuild-android-n-preview-4.tar.gz
Merge "goldfish_setup: grant /system/bin/sh exec access"android-n-preview-4
-rw-r--r--target/board/generic/sepolicy/goldfish_setup.te2
1 files changed, 1 insertions, 1 deletions
diff --git a/target/board/generic/sepolicy/goldfish_setup.te b/target/board/generic/sepolicy/goldfish_setup.te
index bce196a7d2..b8f121cda7 100644
--- a/target/board/generic/sepolicy/goldfish_setup.te
+++ b/target/board/generic/sepolicy/goldfish_setup.te
@@ -5,7 +5,7 @@ type goldfish_setup_exec, exec_type, file_type;
init_daemon_domain(goldfish_setup)
# Inherit open file to shell (interpreter) for script.
-allow goldfish_setup shell_exec:file read;
+allow goldfish_setup shell_exec:file rx_file_perms;
# Run ifconfig, route commands to configure interfaces and routes.
allow goldfish_setup system_file:file execute_no_trans;