Allow insmod-sh to install kernel modules from system_dlkm am: f938468e2e

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs-common/+/22093882

Change-Id: Ic83cf36049922b289a8b53b0174649d1ac29d596
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Robin Peng 2023-03-18 06:23:53 +00:00 committed by Automerger Merge Worker
commit 30532f1287

View file

@ -3,6 +3,9 @@ type insmod-sh_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(insmod-sh)
allow insmod-sh self:capability sys_module;
allow insmod-sh system_dlkm_file:dir r_dir_perms;
allow insmod-sh system_dlkm_file:file r_file_perms;
allow insmod-sh system_dlkm_file:system module_load;
allow insmod-sh vendor_kernel_modules:system module_load;
allow insmod-sh vendor_toolbox_exec:file execute_no_trans;