Skip to content
Snippets Groups Projects
Commit 77852065 authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Remove platform_app shell_data_file:lnk_file read access.


Not sure what denial originally motivated adding this
access, but drop it and see if it resurfaces.  platform_app
is still permissive_or_unconfined() so this should not break
anything.

Change-Id: Ia4418080e3477346fa48d23b4bb5d53396ed5593
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent 53cde700
No related branches found
No related tags found
No related merge requests found
......@@ -12,7 +12,6 @@ bluetooth_domain(platform_app)
# Read from /data/local/tmp or /data/data/com.android.shell.
allow platform_app shell_data_file:dir search;
allow platform_app shell_data_file:file { open getattr read };
allow platform_app shell_data_file:lnk_file read;
# Populate /data/app/vmdl*.tmp, /data/app-private/vmdl*.tmp files
# created by system server.
allow platform_app { apk_tmp_file apk_private_tmp_file }:file rw_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment