supolicy: added platform_app to mlstrustedsubject
This allows access of platform apps such as SystemUI to app data files on devices having SELinux with MLS constrains. Fixes bug #106 also discussed in #98
This commit is contained in:
parent
1542487ffb
commit
0cd00c915a
|
|
@ -18,6 +18,7 @@ supolicy --live "allow coredomain coredomain process {execmem}"
|
|||
|
||||
# read configs set in our app
|
||||
supolicy --live "allow coredomain app_data_file * *"
|
||||
supolicy --live "attradd platform_app mlstrustedsubject"
|
||||
|
||||
# read module apk file in zygote
|
||||
supolicy --live "allow zygote apk_data_file * *"
|
||||
|
|
|
|||
Loading…
Reference in New Issue