From d28714c6f9169b4a3ac6e8ada9b3ffdd1a225480 Mon Sep 17 00:00:00 2001
From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Mon, 30 Jul 2012 16:04:47 -0400
Subject: [PATCH] Introduce app_read_logs boolean.
---
app.te | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/app.te b/app.te
index 8b1aa5364..9324a6d83 100644
--- a/app.te
+++ b/app.te
@@ -121,7 +121,8 @@ if (app_ndk or android_cts) {
allow untrusted_app system_data_file:file { execute open };
}
# Read Logs
-if (android_cts) {
+bool app_read_logs false;
+if (app_read_logs or android_cts) {
allow untrusted_app log_device:chr_file read;
}
--
GitLab