| commit | 30532f12878cd7ed1c02d99ca6577536e7e6d414 | [log] [tgz] |
|---|---|---|
| author | Robin Peng <robinpeng@google.com> | Sat Mar 18 06:23:53 2023 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Sat Mar 18 06:23:53 2023 +0000 |
| tree | 33d3a83a345df41e1322e4f311c347f123f6259e | |
| parent | 14e92351e25978cb2e77c66827f11faa6b7f9ae4 [diff] | |
| parent | f938468e2ecdcd156687fa79e1f7785925a212e2 [diff] |
Allow insmod-sh to install kernel modules from system_dlkm am: f938468e2e Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/22093882 Change-Id: Ic83cf36049922b289a8b53b0174649d1ac29d596 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/insmod/sepolicy/insmod-sh.te b/insmod/sepolicy/insmod-sh.te index d7b4f72..ba82b0a 100644 --- a/insmod/sepolicy/insmod-sh.te +++ b/insmod/sepolicy/insmod-sh.te
@@ -3,6 +3,9 @@ init_daemon_domain(insmod-sh) allow insmod-sh self:capability sys_module; +allow insmod-sh system_dlkm_file:dir r_dir_perms; +allow insmod-sh system_dlkm_file:file r_file_perms; +allow insmod-sh system_dlkm_file:system module_load; allow insmod-sh vendor_kernel_modules:system module_load; allow insmod-sh vendor_toolbox_exec:file execute_no_trans;