Skip to content
Snippets Groups Projects
Commit 59c23d78 authored by William Roberts's avatar William Roberts Committed by William C Roberts
Browse files

neverallow: non-property types property_service set


To prevent assigning non property types to properties, introduce
a neverallow to prevent non property_type types from being  set.

Change-Id: Iba9b5988fe0b6fca4a79ca1d467ec50539479fd5
Signed-off-by: default avatarWilliam Roberts <william.c.roberts@intel.com>
parent 9e6effa1
No related branches found
No related tags found
No related merge requests found
...@@ -534,3 +534,6 @@ neverallow domain ~service_manager_type:service_manager { add find }; ...@@ -534,3 +534,6 @@ neverallow domain ~service_manager_type:service_manager { add find };
# logpersist is only allowed on userdebug/eng builds # logpersist is only allowed on userdebug/eng builds
neverallow { domain userdebug_or_eng(`-logd -shell') } misc_logd_file:file rw_file_perms; neverallow { domain userdebug_or_eng(`-logd -shell') } misc_logd_file:file rw_file_perms;
# Prevent assigning non property types to properties
neverallow domain ~property_type:property_service set;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment