commit 1846ba9afd6446cae8abdc3e6390d1436bc25a11
author Amit Mahajan <amitmahajan@google.com> Mon Mar 12 10:22:05 2018 -0700
committer Amit Mahajan <amitmahajan@google.com> Mon Mar 12 13:10:22 2018 -0700
tree 62d01c4f784ff823ee9db64efb486414014bf80b
parent c75d5b062e29e807022b1d0797f57cd616562039

Allow rild access to system on marlin.

Test: Treehugger
Bug: 74486619
Bug: 36427227
Merged-in: I6ac72f0380e01077de0e133292acfa15e9094712
Change-Id: I6ac72f0380e01077de0e133292acfa15e9094712
(cherry picked from commit d0b246471aa6c9dd14f8b87d98dcdc150defcd7b)

sepolicy/rild.te

diff --git a/sepolicy/rild.te b/sepolicy/rild.te
index 7895517..db7d973 100644
--- a/sepolicy/rild.te
+++ b/sepolicy/rild.te
@@ -40,6 +40,8 @@
 allow rild radio_data_file:file create_file_perms;
 
 # In order to be able to use system()
+typeattribute rild vendor_executes_system_violators;
+allow rild shell_exec:file rx_file_perms;
 allow rild vendor_shell_exec:file rx_file_perms;
 
 # TODO(b/36613472): Remove this once system_server,  mediaserver, bluetooth, and radio no longer