unconfined.te · 8b51674b2d2588c97ee6ddb976d6458ad33e2880 · Werner Sembach / AndroidSystemSEPolicy

Something went wrong on our end

11 years ago

Restrict ability to set checkreqprot. · 8b51674b

Stephen Smalley authored 11 years ago


Now that we set /sys/fs/selinux/checkreqprot via init.rc,
restrict the ability to set it to only the kernel domain.

Change-Id: I975061fd0e69c158db9bdb23e6ba77948e3fead1
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

8b51674b

History

Restrict ability to set checkreqprot.

Stephen Smalley authored 11 years ago


Now that we set /sys/fs/selinux/checkreqprot via init.rc,
restrict the ability to set it to only the kernel domain.

Change-Id: I975061fd0e69c158db9bdb23e6ba77948e3fead1
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>