1 |
commit: cb4a7621007fc2b4bfd34fd5952c151cfa3e82c3 |
2 |
Author: Jason Zaman <jason <AT> perfinion <DOT> com> |
3 |
AuthorDate: Thu Mar 30 16:50:15 2017 +0000 |
4 |
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
5 |
CommitDate: Thu Mar 30 16:50:39 2017 +0000 |
6 |
URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=cb4a7621 |
7 |
|
8 |
android: add new rules for adb |
9 |
|
10 |
policy/modules/contrib/android.te | 6 ++++++ |
11 |
1 file changed, 6 insertions(+) |
12 |
|
13 |
diff --git a/policy/modules/contrib/android.te b/policy/modules/contrib/android.te |
14 |
index 9b3d010f..5c2681c2 100644 |
15 |
--- a/policy/modules/contrib/android.te |
16 |
+++ b/policy/modules/contrib/android.te |
17 |
@@ -56,6 +56,8 @@ files_tmp_filetrans(android_tools_t, android_tmp_t, { file dir }) |
18 |
manage_dirs_pattern(android_tools_t, android_tmp_t, android_tmp_t) |
19 |
manage_files_pattern(android_tools_t, android_tmp_t, android_tmp_t) |
20 |
|
21 |
+corecmd_list_bin(android_tools_t) |
22 |
+ |
23 |
corenet_tcp_bind_adb_port(android_tools_t) |
24 |
corenet_tcp_bind_generic_node(android_tools_t) |
25 |
corenet_tcp_connect_adb_port(android_tools_t) |
26 |
@@ -63,11 +65,15 @@ corenet_tcp_connect_adb_port(android_tools_t) |
27 |
dev_read_sysfs(android_tools_t) |
28 |
dev_rw_generic_usb_dev(android_tools_t) |
29 |
|
30 |
+files_read_etc_files(android_tools_t) |
31 |
+ |
32 |
userdom_manage_user_home_content_dirs(android_tools_t) |
33 |
userdom_manage_user_home_content_files(android_tools_t) |
34 |
userdom_search_user_home_content(android_tools_t) |
35 |
userdom_use_user_terminals(android_tools_t) |
36 |
|
37 |
+sysnet_dns_name_resolve(android_tools_t) |
38 |
+ |
39 |
|
40 |
############################ |
41 |
# |