Skip to content
Snippets Groups Projects
Commit 807d3c22 authored by Treehugger Robot's avatar Treehugger Robot Committed by Gerrit Code Review
Browse files

Merge "logpersist: do not permit dynamic transition to domain"

parents 6c33268c 928cf933
No related branches found
No related tags found
No related merge requests found
......@@ -15,6 +15,12 @@ neverallow logpersist domain:process ptrace;
# Write to files in /data/data or system files on /data except misc_logd_file
neverallow logpersist { app_data_file system_data_file }:dir_file_class_set write;
# Only init is allowed to enter the logpersist domain via exec()
#neverallow { domain -init } logpersist:process transition;
#neverallow * logpersist:process dyntransition;
# Only init should be allowed to enter the logpersist domain via exec()
# Following is a list of debug domains we know that transition to logpersist
# neverallow_with_undefined_domains {
# domain
# -init # goldfish, logcatd, raft
# -mmi # bat, mtp8996, msmcobalt
# -system_app # Smith.apk
# } logpersist:process transition;
neverallow * logpersist:process dyntransition;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment