Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
A
AndroidSystemSEPolicy
Manage
Activity
Members
Code
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Deploy
Releases
Container registry
Model registry
Analyze
Contributor analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
GitLab community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
Werner Sembach
AndroidSystemSEPolicy
Commits
bb21fe8a
Commit
bb21fe8a
authored
Mar 6, 2015
by
Nick Kralevich
Browse files
Options
Downloads
Plain Diff
resolved conflicts for merge of
8be3e779
to stage-aosp-master
Change-Id: I3b402e3a0f55b236c48dc9f4be1973cbfc0af8a4
parents
88d6766b
8be3e779
Branches
Branches containing commit
Tags
Tags containing commit
No related merge requests found
Changes
2
Show whitespace changes
Inline
Side-by-side
Showing
2 changed files
app.te
+0
-5
0 additions, 5 deletions
app.te
untrusted_app.te
+5
-0
5 additions, 0 deletions
untrusted_app.te
with
5 additions
and
5 deletions
app.te
+
0
−
5
View file @
bb21fe8a
...
@@ -119,11 +119,6 @@ allow appdomain media_rw_data_file:file { read getattr };
...
@@ -119,11 +119,6 @@ allow appdomain media_rw_data_file:file { read getattr };
# Read and write /data/data/com.android.providers.telephony files passed over Binder.
# Read and write /data/data/com.android.providers.telephony files passed over Binder.
allow appdomain radio_data_file:file { read write getattr };
allow appdomain radio_data_file:file { read write getattr };
# Read and write system app data files passed over Binder.
# Motivating case was /data/data/com.android.settings/cache/*.jpg for
# cropping or taking user photos.
allow untrusted_app system_app_data_file:file { read write getattr };
# Access SDcard via the fuse mount.
# Access SDcard via the fuse mount.
allow appdomain fuse:dir create_dir_perms;
allow appdomain fuse:dir create_dir_perms;
allow appdomain fuse:file create_file_perms;
allow appdomain fuse:file create_file_perms;
...
...
This diff is collapsed.
Click to expand it.
untrusted_app.te
+
5
−
0
View file @
bb21fe8a
...
@@ -55,6 +55,11 @@ allow untrusted_app shell_data_file:dir r_dir_perms;
...
@@ -55,6 +55,11 @@ allow untrusted_app shell_data_file:dir r_dir_perms;
# This line needs to be deleted.
# This line needs to be deleted.
allow untrusted_app anr_data_file:file r_file_perms;
allow untrusted_app anr_data_file:file r_file_perms;
# Read and write system app data files passed over Binder.
# Motivating case was /data/data/com.android.settings/cache/*.jpg for
# cropping or taking user photos.
allow untrusted_app system_app_data_file:file { read write getattr };
#
#
# Rules migrated from old app domains coalesced into untrusted_app.
# Rules migrated from old app domains coalesced into untrusted_app.
# This includes what used to be media_app, shared_app, and release_app.
# This includes what used to be media_app, shared_app, and release_app.
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment