On 06/15/2015 02:17 PM, Jeffrey Vander Stoep wrote:
> Version 30 is not yet officially supported in AOSP.
> 
> The purpose of version 30 is to provide access control for ioctl
> commands. If you have a need for this functionality, all of the
> necessary components are publicly available. If you don't have a
> specific need for it (sounds like you don't) then I would just leave
> the policy version at the supported value of 26.
> 
> ...If you do need it
> 
> Policy version 30 patches are in the AOSP common kernel tree. You can
> cherry pick them from there. I have included the commit ID for 3.10
> below, but you can also find them for 3.4, 3.14, and 3.18.
> 
> c8c3cd48e44fe12a41cd20e46d36fcfe5a759fd7 security: lsm_audit: add
> ioctl specific auditing
> 8daca972e410f42a4fc1fe2de804c50013b24a28 SELinux: per-command
> whitelisting of ioctls
> c9a8571249fa3a55a0490bd571eaf0cea097fab0 SELinux: use deletion-safe
> iterator to free list
> 8cdfb356b51e29494ca0b9e4e86727d6f841a52d SELinux: ss: Fix policy write
> for ioctl operations

Shouldn't they use the final/upstream version instead, i.e.
https://android-review.googlesource.com/#/c/152510/

_______________________________________________
Seandroid-list mailing list
[email protected]
To unsubscribe, send email to [email protected].
To get help, send an email containing "help" to 
[email protected].

Reply via email to