Skip to content
Snippets Groups Projects
Commit 65565c1c authored by Tri Vo's avatar Tri Vo Committed by Gerrit Code Review
Browse files

Merge "Mark shell as system_executes_vendor_violators."

parents 566411ed 30a31570
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 2 additions and 0 deletions
public/shell.te
+ 2
− 0
View file @ 65565c1c
......@@ -186,6 +186,8 @@ allow shell service_contexts_file:file r_file_perms;
allow shell sepolicy_file:file r_file_perms;
# Allow shell to start up vendor shell
# TODO(b/62041836): system processes should not run vendor executables.
typeattribute shell system_executes_vendor_violators;
allow shell vendor_shell_exec:file rx_file_perms;
###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment