Skip to content
Snippets Groups Projects
Commit e505a35d authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Remove direct qtaguid access from platform/system apps 

am: f3220aa6

Change-Id: Ibf50ab24fa12e07fc44e89420bba99d5665156d9
parents 7a99df89 f3220aa6
Branches
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
Showing
with 0 additions and 6 deletions
public/app.te
+ 0
− 6
View file @ e505a35d
...@@ -181,8 +181,6 @@ allow { ...@@ -181,8 +181,6 @@ allow {
untrusted_app_27 untrusted_app_27
ephemeral_app ephemeral_app
priv_app priv_app
system_app
platform_app
} proc_qtaguid_ctrl:file rw_file_perms; } proc_qtaguid_ctrl:file rw_file_perms;
# read /proc/net/xt_qtguid/*stat* to per-app network data usage. # read /proc/net/xt_qtguid/*stat* to per-app network data usage.
# Exclude isolated app which may not use network sockets. # Exclude isolated app which may not use network sockets.
...@@ -191,8 +189,6 @@ r_dir_file({ ...@@ -191,8 +189,6 @@ r_dir_file({
untrusted_app_27 untrusted_app_27
ephemeral_app ephemeral_app
priv_app priv_app
system_app
platform_app
}, proc_qtaguid_stat) }, proc_qtaguid_stat)
# Everybody can read the xt_qtaguid resource tracking misc dev. # Everybody can read the xt_qtaguid resource tracking misc dev.
# So allow all apps to read from /dev/xt_qtaguid. # So allow all apps to read from /dev/xt_qtaguid.
...@@ -201,8 +197,6 @@ allow { ...@@ -201,8 +197,6 @@ allow {
untrusted_app_27 untrusted_app_27
ephemeral_app ephemeral_app
priv_app priv_app
system_app
platform_app
} qtaguid_device:chr_file r_file_perms; } qtaguid_device:chr_file r_file_perms;
# Grant GPU access to all processes started by Zygote. # Grant GPU access to all processes started by Zygote.
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment