Skip to content
Snippets Groups Projects
Commit 41924f56 authored by Tri Vo's avatar Tri Vo Committed by android-build-merger
Browse files

Merge "shell: remove from system_executes_vendor_violators." am: 8c8ed1f0 am: 602575ec 

am: 1e20b404

Change-Id: I3bfbbaaeb5557d42064d42ee977dd73d73bfe80a
parents cb178848 1e20b404
No related branches found
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
public/domain.te
+ 2
− 0
View file @ 41924f56
...@@ -914,6 +914,7 @@ full_treble_only(` ...@@ -914,6 +914,7 @@ full_treble_only(`
neverallow { neverallow {
coredomain coredomain
-init -init
-shell
-system_executes_vendor_violators -system_executes_vendor_violators
} { } {
vendor_file_type vendor_file_type
...@@ -924,6 +925,7 @@ full_treble_only(` ...@@ -924,6 +925,7 @@ full_treble_only(`
neverallow { neverallow {
coredomain coredomain
-shell
-system_executes_vendor_violators -system_executes_vendor_violators
} vendor_file_type:file execute_no_trans; } vendor_file_type:file execute_no_trans;
') ')
......
public/shell.te
+ 0
− 2
View file @ 41924f56
...@@ -190,8 +190,6 @@ allow shell service_contexts_file:file r_file_perms; ...@@ -190,8 +190,6 @@ allow shell service_contexts_file:file r_file_perms;
allow shell sepolicy_file:file r_file_perms; allow shell sepolicy_file:file r_file_perms;
# Allow shell to start up vendor shell # Allow shell to start up vendor shell
# TODO(b/62041836): system processes should not run vendor executables.
typeattribute shell system_executes_vendor_violators;
allow shell vendor_shell_exec:file rx_file_perms; allow shell vendor_shell_exec:file rx_file_perms;
### ###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment