14 lines
456 B
Plaintext
14 lines
456 B
Plaintext
# necessary for using mmap in system_server process
|
|
allow system_server system_server process {execmem}
|
|
allow system_server system_server memprotect {mmap_zero}
|
|
|
|
# for built-in apps // TODO maybe narrow down the target classes
|
|
allow coredomain coredomain process {execmem}
|
|
|
|
# read configs set in our app
|
|
allow coredomain app_data_file * *
|
|
attradd {system_app platform_app} mlstrustedsubject
|
|
|
|
# read module apk file in zygote
|
|
allow zygote apk_data_file * *
|