Skip to content
Snippets Groups Projects
Commit 71db4110 authored by dcashman's avatar dcashman
Browse files

Remove duplicate neverallow rule.

Commit: 7ffb9972 added protection against low
memory mapping for all domains, a superset of appdomain.  Remove the same,
redundant neverallow rule from appdomain.

Change-Id: Ia41c02763f6b5a260c56d10adfbab649d9f3f97c
parent 7e5b6d0c
No related branches found
No related tags found
No related merge requests found
......@@ -241,10 +241,6 @@ neverallow { appdomain -unconfineddomain } { domain -appdomain }:process
neverallow { appdomain -shell -unconfineddomain } ~appdomain:process
{ transition dyntransition };
# Map low memory.
# Note: Take to domain.te and apply to all domains in the future.
neverallow { appdomain -unconfineddomain } self:memprotect mmap_zero;
# Write to rootfs.
neverallow { appdomain -unconfineddomain } rootfs:dir_file_class_set
{ create write setattr relabelfrom relabelto append unlink link rename };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment