diff options
author | Evgenii Stepanov <eugenis@google.com> | 2016-03-16 13:51:31 -0700 |
---|---|---|
committer | Evgenii Stepanov <eugenis@google.com> | 2016-03-16 14:05:12 -0700 |
commit | dda5590883745ab01840bd8ab17d0ef58406b55b (patch) | |
tree | 0e2f6b3e16c1d999be4d0d1ed7140f20e2241ef4 | |
parent | 9ed71eff4bed91653cba393ea6cb42f041d4e257 (diff) | |
download | sepolicy-dda5590883745ab01840bd8ab17d0ef58406b55b.tar.gz |
Add /data/lib64, /data/vendor/lib64 to ASan sepolicy.
This policy takes effect only when building with
SANITIZE_TARGET=address and allows the Zygote to load libraries from
/data. That's where ASan-instrumented copies of system libraries are
located. 32-bit library directories have been added a while back;
this CL extends the same policy to 64-bit directories.
Bug: 25751174
Change-Id: Ieb4701b78db9649ec8563f2962a69db537ae61b3
-rw-r--r-- | file_contexts_asan | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/file_contexts_asan b/file_contexts_asan index 5ffd7e2..5813d32 100644 --- a/file_contexts_asan +++ b/file_contexts_asan @@ -1,2 +1,4 @@ /data/lib(/.*)? u:object_r:system_file:s0 +/data/lib64(/.*)? u:object_r:system_file:s0 /data/vendor/lib(/.*)? u:object_r:system_file:s0 +/data/vendor/lib64(/.*)? u:object_r:system_file:s0 |