diff --git a/untrusted_app.te b/untrusted_app.te index c91543ed86932065570537c8f41e74f13722cafb..b112636fffe38f711fa6a300bd445c352d4cbde2 100644 --- a/untrusted_app.te +++ b/untrusted_app.te @@ -44,5 +44,8 @@ allow untrusted_app devpts:chr_file rw_file_perms; # running "adb install foo.apk". # TODO: Long term, we don't want apps probing into shell data files. # Figure out a way to remove these rules. -allow untrusted_app shell_data_file:file r_file_perms; +# XXX Adding writing to shell_data_file to fix 10290009; this needs a real fix, +# as allowing apps to write shell data files is a significant possible security +# vuln +allow untrusted_app shell_data_file:file rw_file_perms; allow untrusted_app shell_data_file:dir r_dir_perms;