darkkirb/android_device_lenovo_msm8937-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

land: Grant rmt_storage proper unix perms

Browse source 
Do not grant DAC override permission which would allow this daemon
unix permissions to everything.

avc: denied { dac_override } for pid=2664 comm="rmt_storage" capability=1 scontext=u:r:rmt_storage:s0 tcontext=u:r:rmt_storage:s0 tclass=capability permissive=0

Change-Id: Ib02b4aedab479f5ad8aca3a2100b5c489397002a
This commit is contained in:
Bruno Martins 2017-06-29 08:47:55 +00:00 committed by chaubeyprateek
parent 9d9aa46c82
commit f4645e088c
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
rootdir/init.qcom.rc
View file

@ -416,7 +416,7 @@ service irsc_util /system/bin/irsc_util "/etc/sec_config"
service rmt_storage /system/bin/rmt_storage
class core
user root
group wakelock
group system wakelock
writepid /dev/cpuset/system-background/tasks
service tftp_server /system/bin/tftp_server

1
sepolicy/rmt_storage.te Normal file
View file

@ -0,0 +1 @@
allow rmt_storage self:capability net_raw;