diff --git a/app.te b/app.te index 7da44450fb2e69dcf052d375bcce2524ec1b0b8a..8e220ff24278e959ae15fc452fe3679e2ff9eced 100644 --- a/app.te +++ b/app.te @@ -202,7 +202,7 @@ neverallow { appdomain -unconfineddomain } zygote_socket:sock_file write; neverallow { appdomain -unconfineddomain } { domain -appdomain }:process ptrace; # Write access to /proc/pid entries for any non-app domain. -neverallow { appdomain -unconfineddomain } { domain - appdomain }:file write; +neverallow { appdomain -unconfineddomain } { domain -appdomain }:file write; # signal access to non-app domains. # sigchld allowed for parent death notification.