Skip to content
Snippets Groups Projects
Commit 1df23cbf authored by Nick Kralevich's avatar Nick Kralevich
Browse files

drop vold from sys_rawio neverallow exception

This does not appear needed anymore.

Change-Id: I3128ab610c742b18008f4cfc2a7116b210f770e7
parent 6c768d74
No related branches found
No related tags found
No related merge requests found
...@@ -165,7 +165,7 @@ neverallow { ...@@ -165,7 +165,7 @@ neverallow {
} self:capability mknod; } self:capability mknod;
# Limit raw I/O to these whitelisted domains. # Limit raw I/O to these whitelisted domains.
neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -vold -uncrypt -tee } self:capability sys_rawio; neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -uncrypt -tee } self:capability sys_rawio;
# No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR). # No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
neverallow * self:memprotect mmap_zero; neverallow * self:memprotect mmap_zero;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment