Skip to content
Snippets Groups Projects
  • Nick Kralevich's avatar
    86703051
    Remove world-read access to /data/dalvik-cache/profiles · 86703051
    Nick Kralevich authored
    Remove /data/dalvik-cache/profiles from domain. Profiling information
    leaks data about how people interact with apps, so we don't want
    the data to be available in all SELinux domains.
    
    Add read/write capabilities back to app domains, since apps need to
    read/write profiling data.
    
    Remove restorecon specific rules. The directory is now created by
    init, not installd, so installd doesn't need to set the label.
    
    Change-Id: Ic1b44009faa30d704855e97631006c4b990a4ad3
    86703051
    History
    Remove world-read access to /data/dalvik-cache/profiles
    Nick Kralevich authored
    Remove /data/dalvik-cache/profiles from domain. Profiling information
    leaks data about how people interact with apps, so we don't want
    the data to be available in all SELinux domains.
    
    Add read/write capabilities back to app domains, since apps need to
    read/write profiling data.
    
    Remove restorecon specific rules. The directory is now created by
    init, not installd, so installd doesn't need to set the label.
    
    Change-Id: Ic1b44009faa30d704855e97631006c4b990a4ad3