From e99db13236bc8ac3471fcb22e81178fc423679eb Mon Sep 17 00:00:00 2001 From: Arian Date: Tue, 6 Apr 2021 19:29:03 +0200 Subject: shinano-common: rootdir: Introduce a service to start suntrold * suntrold is a oneshot service and spawns a subprocess which is required for the rear camera. Since [1] oneshot services' process groups are killed which prevents suntrold from working correctly. * To work this issue around create a non-oneshot service, suntrold.sh, which never exits, so that suntrold can be started from it and it's subprocesses will not be killed. [1] https://github.com/aosp-mirror/platform_system_core/commit/d89ed132a0ee1a57046286b83e64a35b71774952 [Idea of this is from LuK1337] Co-authored-by: LuK1337 Change-Id: Id9c4f56648168f0ffe19b2bb31c591750afe6f97 --- sepolicy/credmgrd.te | 3 +++ 1 file changed, 3 insertions(+) (limited to 'sepolicy/credmgrd.te') diff --git a/sepolicy/credmgrd.te b/sepolicy/credmgrd.te index 2b61930..38edd9f 100644 --- a/sepolicy/credmgrd.te +++ b/sepolicy/credmgrd.te @@ -18,4 +18,7 @@ allow credmgrd system_data_root_file:dir { create_dir_perms relabelfrom }; allow credmgrd credmgrd_data_file:dir { create_dir_perms relabelto }; allow credmgrd credmgrd_data_file:file create_file_perms; +# Allow suntrold.sh to start suntrold +allow credmgrd credmgrd_exec:file rx_file_perms; + set_prop(credmgrd, credmgrd_prop) -- cgit v1.2.3