| commit | 0b2e23d18029f59db3e02341fe2e227512e0f69c | [log] [tgz] |
|---|---|---|
| author | Jorge Lucangeli Obes <jorgelo@google.com> | Thu Feb 18 14:09:36 2016 -0800 |
| committer | Jorge Lucangeli Obes <jorgelo@google.com> | Thu Feb 18 14:19:06 2016 -0800 |
| tree | 0f9318642f5a970d14eb466fa2463170bd96a46e | |
| parent | f962c694ea1e4e2c050a8f61b83cf72c7a5805fb [diff] |
PicoIMX: Fix file permissions, SELinux policy.
-Several text files had executable permissions. Remove the +x.
-Some domains are attempting to load kernel modules (which is
not allowed in Brillo), resulting in several denials like:
"""
denied { module_request } for kmod="personality-8" scontext=u:r:init:s0
tcontext=u:r:kernel:s0 tclass=system
"""
Stop auditing these denials to make it easier to diagnose real SELinux
issues.
-'allow mediaserver debug_prop:property_service set;' is not needed.
Bug: 27249509
Change-Id: Iced4d96b63bb100f5b7ec27b08cbf14d884e65df
diff --git a/fstab.device b/fstab.device old mode 100755 new mode 100644
diff --git a/init.freescale.rc b/init.freescale.rc old mode 100755 new mode 100644
diff --git a/kernel-fsl.mk b/kernel-fsl.mk old mode 100755 new mode 100644
diff --git a/sepolicy/domain.te b/sepolicy/domain.te new file mode 100644 index 0000000..c8d8d53 --- /dev/null +++ b/sepolicy/domain.te
@@ -0,0 +1 @@ +dontaudit domain kernel:system module_request;
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts old mode 100755 new mode 100644
diff --git a/sepolicy/init.te b/sepolicy/init.te old mode 100755 new mode 100644
diff --git a/sepolicy/mediaserver.te b/sepolicy/mediaserver.te deleted file mode 100644 index 72acfbb..0000000 --- a/sepolicy/mediaserver.te +++ /dev/null
@@ -1 +0,0 @@ -allow mediaserver debug_prop:property_service set;
diff --git a/sepolicy/misc.te b/sepolicy/misc.te old mode 100755 new mode 100644
diff --git a/sepolicy/sensors.te b/sepolicy/sensors.te old mode 100755 new mode 100644
diff --git a/sepolicy/sensorservice.te b/sepolicy/sensorservice.te old mode 100755 new mode 100644
diff --git a/sepolicy/update_engine.te b/sepolicy/update_engine.te old mode 100755 new mode 100644
diff --git a/ueventd.freescale.rc b/ueventd.freescale.rc old mode 100755 new mode 100644