commit 30127557e12447901ffaa1716f61d63d1ea4cbdb
author bohu <bohu@google.com> Fri Dec 14 11:04:13 2018 -0800
committer Bo Hu <bohu@google.com> Wed Sep 25 17:49:15 2019 +0000
tree 463ee9e3bfa45043090f93163e9766cbcf53a973
parent c088ea9cfcc8745d2f53c09ba1476db27eaf10f0

goldfish-ndk: allow init to mount/rw binfmt_misc

also allow shell to load modules

BUG: 121031669
Change-Id: I3935f5e15763682a1016ee7625a6a11889a4a01f
(cherry picked from commit 97d3afb24c57962a48b3dc81054f2818e5052ad4)

sepolicy/common/init.te

diff --git a/sepolicy/common/init.te b/sepolicy/common/init.te
index 40a6328..15d6814 100644
--- a/sepolicy/common/init.te
+++ b/sepolicy/common/init.te
@@ -2,3 +2,5 @@
 allow init proc:dir { mounton };
 dontaudit init kernel:system module_request;
 allow init serial_device:chr_file { ioctl open read write };
+allow init proc:dir mounton;
+allow init binfmt_miscfs:file write;
\ No newline at end of file

sepolicy/common/shell.te

diff --git a/sepolicy/common/shell.te b/sepolicy/common/shell.te
index b246d7e..c96ca31 100644
--- a/sepolicy/common/shell.te
+++ b/sepolicy/common/shell.te
@@ -1 +1,2 @@
 allow shell serial_device:chr_file rw_file_perms;
+allow shell kernel:system module_request;