Skip to content
Snippets Groups Projects
Commit 0b1073b8 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep
Browse files

resolved conflicts for 5d7bd584 to master

Change-Id: I55430375d1ef58422153fd00d688060e48acc117
parents c6ce4bd9 5d7bd584
Branches
Tags
No related merge requests found
...@@ -344,6 +344,10 @@ neverallow appdomain ...@@ -344,6 +344,10 @@ neverallow appdomain
dhcp_data_file:dir_file_class_set dhcp_data_file:dir_file_class_set
{ create write setattr relabelfrom relabelto append unlink link rename }; { create write setattr relabelfrom relabelto append unlink link rename };
# access tmp apk files
neverallow { appdomain -platform_app -priv_app }
{ apk_tmp_file apk_private_tmp_file }:dir_file_class_set *;
# Access to factory files. # Access to factory files.
neverallow appdomain efs_file:dir_file_class_set write; neverallow appdomain efs_file:dir_file_class_set write;
neverallow { appdomain -shell } efs_file:dir_file_class_set read; neverallow { appdomain -shell } efs_file:dir_file_class_set read;
......
...@@ -80,10 +80,6 @@ allow untrusted_app radio_service:service_manager find; ...@@ -80,10 +80,6 @@ allow untrusted_app radio_service:service_manager find;
allow untrusted_app surfaceflinger_service:service_manager find; allow untrusted_app surfaceflinger_service:service_manager find;
allow untrusted_app app_api_service:service_manager find; allow untrusted_app app_api_service:service_manager find;
# Allow verifier to access staged apks.
allow untrusted_app { apk_tmp_file apk_private_tmp_file }:dir r_dir_perms;
allow untrusted_app { apk_tmp_file apk_private_tmp_file }:file r_file_perms;
# Allow GMS core to access perfprofd output, which is stored # Allow GMS core to access perfprofd output, which is stored
# in /data/misc/perfprofd/. GMS core will need to list all # in /data/misc/perfprofd/. GMS core will need to list all
# data stored in that directory to process them one by one. # data stored in that directory to process them one by one.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment