Skip to content
Snippets Groups Projects
Commit ad0d0fc7 authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Protect /data/property.


/data/property is only accessible by root and is used by the init
property service for storing persistent property values.  Create
a separate type for it and only allow init to write to the directory
and files within it.  Ensure that we do not allow access to other domains
in future changes or device-specific policy via a neverallow rule.

Change-Id: Iff556b9606c5651c0f1bba902e30b59bdd6f063a
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent c8859c2d
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment