Skip to content
Snippets Groups Projects
  • Nick Kralevich's avatar
    c255e377
    Remove platform_app from neverallow execute from /data · c255e377
    Nick Kralevich authored
    Apparently some manufacturers sign APKs with the platform key
    which use renderscript. Renderscript works by compiling the
    .so file, and placing it in the app's home directory, where the
    app loads the content.
    
    Drop platform_app from the neverallow restriction to allow partners
    to add rules allowing /data execute for this class of apps.
    
    We should revisit this in the future after we have a better
    solution for apps which use renderscript.
    
    (cherry picked from commit c55cf17a)
    
    Bug: 29857189
    Change-Id: I058a802ad5eb2a67e657b6d759a3ef4e21cbb8cc
    c255e377
    History
    Remove platform_app from neverallow execute from /data
    Nick Kralevich authored
    Apparently some manufacturers sign APKs with the platform key
    which use renderscript. Renderscript works by compiling the
    .so file, and placing it in the app's home directory, where the
    app loads the content.
    
    Drop platform_app from the neverallow restriction to allow partners
    to add rules allowing /data execute for this class of apps.
    
    We should revisit this in the future after we have a better
    solution for apps which use renderscript.
    
    (cherry picked from commit c55cf17a)
    
    Bug: 29857189
    Change-Id: I058a802ad5eb2a67e657b6d759a3ef4e21cbb8cc
app.te 16.98 KiB