Skip to content
Snippets Groups Projects
Commit 1f690c6a authored by Nick Kralevich's avatar Nick Kralevich
Browse files

Remove duplicate neverallow rules.

These neverallow rules are exact duplicates of neverallow
rules which occur earlier in the file.

Change-Id: I75e3d84109f26374257741425f8de638a15f2741
parent a00ed2b2
Branches
Tags
No related merge requests found
......@@ -144,10 +144,6 @@ neverallow untrusted_app sysfs_mac_address:file no_rw_file_perms;
neverallow untrusted_app { cache_file cache_recovery_file }:dir ~{ r_dir_perms };
neverallow untrusted_app { cache_file cache_recovery_file }:file ~{ read getattr };
# Do not allow untrusted_app to set system properties.
neverallow untrusted_app property_socket:sock_file write;
neverallow untrusted_app property_type:property_service set;
# Do not allow untrusted_app to create/unlink files outside of its sandbox,
# internal storage or sdcard.
# World accessible data locations allow application to fill the device
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment