Fix SEPolicy not work
This commit is contained in:
parent
c49668d970
commit
611361540d
|
|
@ -1,13 +1,6 @@
|
||||||
# necessary for using mmap in system_server process
|
|
||||||
allow system_server system_server process {execmem}
|
allow system_server system_server process {execmem}
|
||||||
allow system_server system_server memprotect {mmap_zero}
|
allow system_server system_server memprotect {mmap_zero}
|
||||||
|
|
||||||
# for built-in apps // TODO maybe narrow down the target classes
|
|
||||||
allow coredomain coredomain process {execmem}
|
allow coredomain coredomain process {execmem}
|
||||||
|
|
||||||
# read configs set in our app
|
|
||||||
allow coredomain app_data_file * *
|
allow coredomain app_data_file * *
|
||||||
attradd {system_app platform_app} mlstrustedsubject
|
attradd {system_app platform_app} mlstrustedsubject
|
||||||
|
|
||||||
# read module apk file in zygote
|
|
||||||
allow zygote apk_data_file * *
|
allow zygote apk_data_file * *
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue