Skip to content
Snippets Groups Projects
Commit d2999e95 authored by Alex Klyubin's avatar Alex Klyubin Committed by android-build-merger
Browse files

Fix warnings

am: edc53291

Change-Id: I1dca621fc5b41d0585ebc5899e5c1fa68bd2d60d
parents 5572b8ba edc53291
No related branches found
No related tags found
No related merge requests found
...@@ -451,11 +451,11 @@ full_treble_only(` ...@@ -451,11 +451,11 @@ full_treble_only(`
## ##
# On full TREBLE devices core android components and vendor components may # On full TREBLE devices core android components and vendor components may
# not directly access each other's data types. All communication must occur # not directly access each other data types. All communication must occur
# over HW binder. Open file descriptors may be passed and read/write/stat # over HW binder. Open file descriptors may be passed and read/write/stat
# operations my be performed on those FDs. Disallow all other operations. # operations my be performed on those FDs. Disallow all other operations.
# #
# do not allow vendor component access to coredomains' data types # do not allow vendor component access to coredomains data types
neverallow { neverallow {
domain domain
-coredomain -coredomain
...@@ -464,7 +464,7 @@ full_treble_only(` ...@@ -464,7 +464,7 @@ full_treble_only(`
} core_data_file_type:{ } core_data_file_type:{
file_class_set file_class_set
} ~{ append getattr ioctl read write }; } ~{ append getattr ioctl read write };
# do not allow vendor component access to coredomains' data directories. # do not allow vendor component access to coredomains data directories.
# /data has the system_data_file type. Allow all domains to have dir # /data has the system_data_file type. Allow all domains to have dir
# search permissions which allows path traversal. # search permissions which allows path traversal.
neverallow { neverallow {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment