shell_user.te · fea6e66fad0dd87e66d4df8255733b6840752316 · Werner Sembach / AndroidSystemSEPolicy

Something went wrong on our end

11 years ago

Restrict the ability to set SELinux enforcing mode to init. · d99e6d5f

Stephen Smalley authored 11 years ago


Also make su and shell permissive in non-user builds to allow
use of setenforce without violating the neverallow rule.

Change-Id: Ie76ee04e90d5a76dfaa5f56e9e3eb7e283328a3f
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

d99e6d5f

History

Restrict the ability to set SELinux enforcing mode to init.

Stephen Smalley authored 11 years ago


Also make su and shell permissive in non-user builds to allow
use of setenforce without violating the neverallow rule.

Change-Id: Ie76ee04e90d5a76dfaa5f56e9e3eb7e283328a3f
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>