Skip to content
Snippets Groups Projects
Commit df642bef authored by Nick Kralevich's avatar Nick Kralevich
Browse files

Continuation of 9b2e0cbe

9b2e0cbe changed all uses of capability
to global_capability_class_set but accidentally omitted one entry.
Fix the one entry.

Test: policy compiles.
Change-Id: I1bb8c494a2660d9f02783c93b07d4238a2575106
parent b6a05a93
No related branches found
No related tags found
No related merge requests found
...@@ -787,8 +787,7 @@ neverallow system_server { domain -system_server }:process ptrace; ...@@ -787,8 +787,7 @@ neverallow system_server { domain -system_server }:process ptrace;
# CAP_SYS_RESOURCE was traditionally needed for sensitive /proc/PID # CAP_SYS_RESOURCE was traditionally needed for sensitive /proc/PID
# file read access. However, that is now unnecessary (b/34951864) # file read access. However, that is now unnecessary (b/34951864)
# This neverallow can be removed after b/34951864 is fixed. neverallow system_server system_server:global_capability_class_set sys_resource;
neverallow system_server system_server:capability sys_resource;
# TODO(b/67468181): Remove following lines upon resolution of this bug # TODO(b/67468181): Remove following lines upon resolution of this bug
dontaudit system_server statscompanion_service:service_manager { add find }; dontaudit system_server statscompanion_service:service_manager { add find };
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment