f46d7a26c19d87e0d39de9504bc6e6ad6fb1aedb - android_system_sepolicy

commit	f46d7a26c19d87e0d39de9504bc6e6ad6fb1aedb	[log] [tgz]
author	Marco Ballesio <balejs@google.com>	Wed Nov 25 14:02:56 2020 -0800
committer	Marco Ballesio <balejs@google.com>	Mon Nov 30 11:46:14 2020 -0800
tree	0295316918f3c18962b3b4ba966f56c71967705a
parent	aff923a4697b2109b8a887d5db1fc3be7c5c3c5d [diff]

sepolicy: rules for uid/pid cgroups v2 hierarchy

the cgroups v2 uid/gid hierarchy will replace cgroup for all sepolicy
rules. For this reason, old rules have to be duplicated to cgroup_v2,
plus some rules must be added to allow the ownership change for cgroup
files created by init and zygote.

Test: booted device, verified correct access from init, system_server
and zygote to the uid/pid cgroup files

Change-Id: I80c2a069b0fb409b442e1160148ddc48e31d6809

private/app_neverallows.te[diff]
private/domain.te[diff]
private/logpersist.te[diff]
private/priv_app.te[diff]
private/surfaceflinger.te[diff]
private/system_app.te[diff]
private/system_server.te[diff]
private/zygote.te[diff]
public/charger.te[diff]
public/credstore.te[diff]
public/dhcp.te[diff]
public/domain.te[diff]
public/drmserver.te[diff]
public/dumpstate.te[diff]
public/gatekeeperd.te[diff]
public/hal_cas.te[diff]
public/hal_drm.te[diff]
public/hal_fingerprint.te[diff]
public/hal_telephony.te[diff]
public/hal_wifi_supplicant.te[diff]
public/healthd.te[diff]
public/init.te[diff]
public/inputflinger.te[diff]
public/installd.te[diff]
public/keystore.te[diff]
public/lmkd.te[diff]
public/logd.te[diff]
public/mediaextractor.te[diff]
public/mediametrics.te[diff]
public/mediaserver.te[diff]
public/performanced.te[diff]
public/racoon.te[diff]
public/sdcardd.te[diff]
public/shell.te[diff]
public/vendor_init.te[diff]

35 files changed