NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04767749] Remove noatsecure from sepolicy

Browse Source 
This effectively disables LD_PRELOAD for init children and breaks
loading of libdirect-coredump.  This, however, is needed to avoid
layering violation and is the right thing to do long term.

MTK-Commit-Id: dafd04d1c1bbf0dae863774bfbd2c76cfecb2d98

Bug: 140789528
Test: Boot with boringssl_self_test32 enabled.
Change-Id: Id10c673694431dfae2fff401598e808a71e397ca
CR-Id: ALPS04767749
Feature: Android Exception Engine(AEE)
This commit is contained in:
Juju Sung 2020-01-18 10:20:59 +08:00
parent 0386f1b975
commit 5173b15558
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
r_non_plat/init.te
View File

@ -41,9 +41,9 @@ allow init para_block_device:blk_file w_file_perms;
# Date : WK15.32 # Date : WK15.32
# Operation : Migration # Operation : Migration
# Purpose : disable AT_SECURE for LD_PRELOAD # Purpose : disable AT_SECURE for LD_PRELOAD
userdebug_or_eng(` #userdebug_or_eng(`
allow init { domain -lmkd -crash_dump -llkd -mediaswcodec }:process noatsecure; # allow init { domain -lmkd -crash_dump -llkd -mediaswcodec }:process noatsecure;
') #')
# Date : WK16.26 # Date : WK16.26
# Operation : Access dynamic_debug control file # Operation : Access dynamic_debug control file