Skip to content
Snippets Groups Projects
Commit c510576e authored by Jeff Vander Stoep's avatar Jeff Vander Stoep
Browse files

Only zygote and runas my transistion to app domains

Remove exemption for init.

Bug: 29761117
Change-Id: I754ca647e3834010702c7dcd7fd10c1f6c61c594
parent 2a73adc6
No related branches found
No related tags found
No related merge requests found
......@@ -484,7 +484,7 @@ neverallow {
} shell:process { transition dyntransition };
# Only domains spawned from zygote and runas may have the appdomain attribute.
neverallow { domain -runas -zygote -init } {
neverallow { domain -runas -zygote } {
appdomain -shell userdebug_or_eng(`-su')
}:process { transition dyntransition };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment