Merge "Mark shell as system_executes_vendor_violators."

am: 65565c1c Change-Id: I8b5123d574282c5167dfdcd3b259bb6a89373716

Merge "Mark shell as system_executes_vendor_violators."
6029d329 · Tri Vo · android-build-merger · 6b2a01a6 · 65565c1c · 6029d329
Commit 6029d329 authored 7 years ago by Tri Vo Committed by android-build-merger 7 years ago
--- a/public/shell.te
+++ b/public/shell.te
@@ -186,6 +186,8 @@ allow shell service_contexts_file:file r_file_perms;
 allow shell sepolicy_file:file r_file_perms;
 # Allow shell to start up vendor shell
+# TODO(b/62041836): system processes should not run vendor executables.
+typeattribute shell system_executes_vendor_violators;
 allow shell vendor_shell_exec:file rx_file_perms;
 ###