Skip to content
Snippets Groups Projects
Commit 553bafef authored by Geremy Condra's avatar Geremy Condra Committed by Android Git Automerger
Browse files

am 29d0d406: Add the ability to write shell files to the untrusted_app domain.

* commit '29d0d406':
  Add the ability to write shell files to the untrusted_app domain.
parents b74efd33 29d0d406
No related branches found
No related tags found
No related merge requests found
...@@ -44,5 +44,8 @@ allow untrusted_app devpts:chr_file rw_file_perms; ...@@ -44,5 +44,8 @@ allow untrusted_app devpts:chr_file rw_file_perms;
# running "adb install foo.apk". # running "adb install foo.apk".
# TODO: Long term, we don't want apps probing into shell data files. # TODO: Long term, we don't want apps probing into shell data files.
# Figure out a way to remove these rules. # Figure out a way to remove these rules.
allow untrusted_app shell_data_file:file r_file_perms; # XXX Adding writing to shell_data_file to fix 10290009; this needs a real fix,
# as allowing apps to write shell data files is a significant possible security
# vuln
allow untrusted_app shell_data_file:file rw_file_perms;
allow untrusted_app shell_data_file:dir r_dir_perms; allow untrusted_app shell_data_file:dir r_dir_perms;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment