Skip to content
Snippets Groups Projects
Commit 86a39dd6 authored by Stephen Smalley's avatar Stephen Smalley Committed by Android Git Automerger
Browse files

am d4731ad8: Remove -kernel -recovery from keystore_data_file neverallow.

* commit 'd4731ad8':
  Remove -kernel -recovery from keystore_data_file neverallow.
parents e269b48c d4731ad8
No related branches found
No related tags found
No related merge requests found
......@@ -21,8 +21,8 @@ allow keystore tee:unix_stream_socket connectto;
neverallow { domain -keystore } keystore_data_file:dir ~{ open create read getattr setattr search relabelto };
neverallow { domain -keystore } keystore_data_file:notdevfile_class_set ~{ relabelto getattr };
neverallow { domain -keystore -init -kernel -recovery } keystore_data_file:dir *;
neverallow { domain -keystore -init -kernel -recovery } keystore_data_file:notdevfile_class_set *;
neverallow { domain -keystore -init } keystore_data_file:dir *;
neverallow { domain -keystore -init } keystore_data_file:notdevfile_class_set *;
neverallow domain keystore:process ptrace;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment