Skip to content
Snippets Groups Projects
Commit a499041f authored by Nick Kralevich's avatar Nick Kralevich Committed by Jeff Vander Stoep
Browse files

drop vold from sys_rawio neverallow exception

(cherry picked from commit 1df23cbf)

This does not appear needed anymore.

Bug: 27549740
Change-Id: I3128ab610c742b18008f4cfc2a7116b210f770e7
parent 10908ff2
Branches
Tags
No related merge requests found
......@@ -165,7 +165,7 @@ neverallow {
} self:capability mknod;
# Limit raw I/O to these whitelisted domains.
neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -vold -uncrypt -tee } self:capability sys_rawio;
neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -uncrypt -tee } self:capability sys_rawio;
# No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
neverallow * self:memprotect mmap_zero;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment