Skip to content
Snippets Groups Projects
  • Nick Kralevich's avatar
    ae48ecbd
    Revert "Ensure /sys restrictions for isolated_apps" · ae48ecbd
    Nick Kralevich authored
    Bullhead and dragon are broken. Revert until I can fix
    those builds.
    
    Dragon:
    
    libsepol.report_failure: neverallow on line 113 of system/sepolicy/private/isolated_app.te (or line 26264 of policy.conf) violated by allow isolated_app sysfs_socinfo:file { ioctl read lock open }; 
    
    Bullhead:
    
    libsepol.report_failure: neverallow on line 113 of system/sepolicy/private/isolated_app.te (or line 26283 of policy.conf) violated by allow isolated_app sysfs_power_management:file { ioctl read lock open }; 
    libsepol.report_failure: neverallow on line 113 of system/sepolicy/private/isolated_app.te (or line 26283 of policy.conf) violated by allow isolated_app sysfs_socinfo:file { ioctl read lock open }; 
    libsepol.report_failure: neverallow on line 113 of system/sepolicy/private/isolated_app.te (or line 26283 of policy.conf) violated by allow isolated_app sysfs_thermal:file { ioctl read lock open }; 
    libsepol.check_assertions: 3 neverallow failures occurred 
    
    
    This reverts commit 579366a0.
    
    Change-Id: I1ea4824e226c06628769898299f2e322060d0d06
    Test: policy compiles.
    ae48ecbd
    History
    Revert "Ensure /sys restrictions for isolated_apps"
    Nick Kralevich authored
    Bullhead and dragon are broken. Revert until I can fix
    those builds.
    
    Dragon:
    
    libsepol.report_failure: neverallow on line 113 of system/sepolicy/private/isolated_app.te (or line 26264 of policy.conf) violated by allow isolated_app sysfs_socinfo:file { ioctl read lock open }; 
    
    Bullhead:
    
    libsepol.report_failure: neverallow on line 113 of system/sepolicy/private/isolated_app.te (or line 26283 of policy.conf) violated by allow isolated_app sysfs_power_management:file { ioctl read lock open }; 
    libsepol.report_failure: neverallow on line 113 of system/sepolicy/private/isolated_app.te (or line 26283 of policy.conf) violated by allow isolated_app sysfs_socinfo:file { ioctl read lock open }; 
    libsepol.report_failure: neverallow on line 113 of system/sepolicy/private/isolated_app.te (or line 26283 of policy.conf) violated by allow isolated_app sysfs_thermal:file { ioctl read lock open }; 
    libsepol.check_assertions: 3 neverallow failures occurred 
    
    
    This reverts commit 579366a0.
    
    Change-Id: I1ea4824e226c06628769898299f2e322060d0d06
    Test: policy compiles.