te_macros · d99e6d5fa135882bb51878a3c68ed3a2aebe7d04 · Werner Sembach / AndroidSystemSEPolicy

Something went wrong on our end

11 years ago

Restrict the ability to set SELinux enforcing mode to init. · d99e6d5f

Stephen Smalley authored 11 years ago


Also make su and shell permissive in non-user builds to allow
use of setenforce without violating the neverallow rule.

Change-Id: Ie76ee04e90d5a76dfaa5f56e9e3eb7e283328a3f
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

d99e6d5f

History

Restrict the ability to set SELinux enforcing mode to init.

Stephen Smalley authored 11 years ago


Also make su and shell permissive in non-user builds to allow
use of setenforce without violating the neverallow rule.

Change-Id: Ie76ee04e90d5a76dfaa5f56e9e3eb7e283328a3f
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

te_macros 9.88 KiB