Skip to content
Snippets Groups Projects
Commit a24f64a1 authored by Nick Kralevich's avatar Nick Kralevich Committed by android-build-merger
Browse files

drop vold from sys_rawio neverallow exception

am: 1df23cbf

* commit '1df23cbf':
  drop vold from sys_rawio neverallow exception

Change-Id: I4f58ea24f436f15139830e3e4a6eb321deecebf5
parents c09ae490 1df23cbf
Branches
Tags
No related merge requests found
......@@ -165,7 +165,7 @@ neverallow {
} self:capability mknod;
# Limit raw I/O to these whitelisted domains.
neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -vold -uncrypt -tee } self:capability sys_rawio;
neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -uncrypt -tee } self:capability sys_rawio;
# No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
neverallow * self:memprotect mmap_zero;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment