Skip to content
Snippets Groups Projects
Commit 6d049841 authored by Stephen Smalley's avatar Stephen Smalley Committed by Android Git Automerger
Browse files

am 86a39dd6: am d4731ad8: Remove -kernel -recovery from keystore_data_file neverallow. 

* commit '86a39dd6':
  Remove -kernel -recovery from keystore_data_file neverallow.
parents 859abd97 86a39dd6
Branches
Tags
No related merge requests found
Show whitespace changes
Inline Side-by-side
Showing
with 2 additions and 2 deletions
keystore.te
+ 2
− 2
View file @ 6d049841
...@@ -21,8 +21,8 @@ allow keystore tee:unix_stream_socket connectto; ...@@ -21,8 +21,8 @@ allow keystore tee:unix_stream_socket connectto;
neverallow { domain -keystore } keystore_data_file:dir ~{ open create read getattr setattr search relabelto }; neverallow { domain -keystore } keystore_data_file:dir ~{ open create read getattr setattr search relabelto };
neverallow { domain -keystore } keystore_data_file:notdevfile_class_set ~{ relabelto getattr }; neverallow { domain -keystore } keystore_data_file:notdevfile_class_set ~{ relabelto getattr };
neverallow { domain -keystore -init -kernel -recovery } keystore_data_file:dir *; neverallow { domain -keystore -init } keystore_data_file:dir *;
neverallow { domain -keystore -init -kernel -recovery } keystore_data_file:notdevfile_class_set *; neverallow { domain -keystore -init } keystore_data_file:notdevfile_class_set *;
neverallow domain keystore:process ptrace; neverallow domain keystore:process ptrace;
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment