am 2cba1ee1: Remove ability to read all /proc/pid/attr/current entries.

* commit '2cba1ee1': Remove ability to read all /proc/pid/attr/current entries.

am 2cba1ee1: Remove ability to read all /proc/pid/attr/current entries.
* commit '2cba1ee1': Remove ability to read all /proc/pid/attr/current entries.
68cd16ba · Stephen Smalley · Android Git Automerger · f836abef · 2cba1ee1 · 68cd16ba
Commit 68cd16ba authored 10 years ago by Stephen Smalley Committed by Android Git Automerger 10 years ago
--- a/app.te
+++ b/app.te
@@ -178,8 +178,6 @@ allow appdomain runas_exec:file getattr;
 # Check SELinux policy and contexts.
 selinux_check_access(appdomain)
 selinux_check_context(appdomain)
-# Validate that each process is running in the correct security context.
-allow appdomain domain:process getattr;

 ###
 ### Neverallow rules