Skip to content
Snippets Groups Projects
Commit c255e377 authored by Nick Kralevich's avatar Nick Kralevich Committed by Jeff Vander Stoep
Browse files

Remove platform_app from neverallow execute from /data

Apparently some manufacturers sign APKs with the platform key
which use renderscript. Renderscript works by compiling the
.so file, and placing it in the app's home directory, where the
app loads the content.

Drop platform_app from the neverallow restriction to allow partners
to add rules allowing /data execute for this class of apps.

We should revisit this in the future after we have a better
solution for apps which use renderscript.

(cherry picked from commit c55cf17a)

Bug: 29857189
Change-Id: I058a802ad5eb2a67e657b6d759a3ef4e21cbb8cc
parent 6bb6c16e
No related branches found
No related tags found
No related merge requests found
...@@ -442,7 +442,6 @@ neverallow { ...@@ -442,7 +442,6 @@ neverallow {
bluetooth bluetooth
isolated_app isolated_app
nfc nfc
platform_app
radio radio
shared_relro shared_relro
system_app system_app
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment