Skip to content
Snippets Groups Projects
Commit 7938ae7e authored by dcashman's avatar dcashman Committed by Android Git Automerger
Browse files

am 0264fd11: am 76f3fe33: Add neverallow rule for set_context_mgr. 

* commit '0264fd11':
  Add neverallow rule for set_context_mgr.
parents 18805ee1 0264fd11
No related branches found
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
Showing
with 3 additions and 0 deletions
domain.te
+ 3
− 0
View file @ 7938ae7e
...@@ -329,3 +329,6 @@ neverallow { domain -recovery } system_block_device:blk_file write; ...@@ -329,3 +329,6 @@ neverallow { domain -recovery } system_block_device:blk_file write;
# No domains other than install_recovery or recovery can write to recovery. # No domains other than install_recovery or recovery can write to recovery.
neverallow { domain -install_recovery -recovery } recovery_block_device:blk_file write; neverallow { domain -install_recovery -recovery } recovery_block_device:blk_file write;
# Only servicemanager should be able to register with binder as the context manager
neverallow { domain -servicemanager } *:binder set_context_mgr;
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment