Merge "Only allow init to start vold" am: 3b29076c am: cf39c116

am: a42786f9 Change-Id: I861d3110da63e147682e73ba9ee8f92335dcebc0

Merge "Only allow init to start vold" am: 3b29076c am: cf39c116
9d24568d · Peter Enderborg · android-build-merger · 313a472d · a42786f9 · 9d24568d
Commit 9d24568d authored 7 years ago by Peter Enderborg Committed by android-build-merger 7 years ago
--- a/public/vold.te
+++ b/public/vold.te
@@ -192,3 +192,4 @@ neverallow { domain -vold -init -kernel } vold_data_file:notdevfile_class_set *;
 neverallow { domain -vold -init } restorecon_prop:property_service set;

 neverallow vold fsck_exec:file execute_no_trans;
+neverallow { domain -init } vold:process { transition dyntransition };