domain.te · 84a81d1ed6b6bb2fe2c3f536086d135a72d22c37 · Werner Sembach / AndroidSystemSEPolicy

Something went wrong on our end

11 years ago

Restrict ability to set checkreqprot. · 8b51674b

Stephen Smalley authored 11 years ago


Now that we set /sys/fs/selinux/checkreqprot via init.rc,
restrict the ability to set it to only the kernel domain.

Change-Id: I975061fd0e69c158db9bdb23e6ba77948e3fead1
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

8b51674b

History

Restrict ability to set checkreqprot.

Stephen Smalley authored 11 years ago


Now that we set /sys/fs/selinux/checkreqprot via init.rc,
restrict the ability to set it to only the kernel domain.

Change-Id: I975061fd0e69c158db9bdb23e6ba77948e3fead1
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

domain.te 6.14 KiB