Merge "Only allow init to start vold" am: 3b29076c

am: cf39c116 Change-Id: Ib3d86424bb8115aa1ec7d8304a1557f91023a9c4

Merge "Only allow init to start vold" am: 3b29076c
a42786f9 · Peter Enderborg · android-build-merger · b9eba1d0 · cf39c116 · a42786f9
Commit a42786f9 authored 7 years ago by Peter Enderborg Committed by android-build-merger 7 years ago
--- a/public/vold.te
+++ b/public/vold.te
@@ -189,3 +189,4 @@ neverallow { domain -vold -init -kernel } vold_data_file:notdevfile_class_set *;
 neverallow { domain -vold -init } restorecon_prop:property_service set;

 neverallow vold fsck_exec:file execute_no_trans;
+neverallow { domain -init } vold:process { transition dyntransition };