Skip to content
Snippets Groups Projects
Commit 9563a64d authored by Alan Stokes's avatar Alan Stokes Committed by android-build-merger
Browse files

Temporarily add auditing of execmod by apps. am: 708aa90d

am: a55f637a

Change-Id: I7a7d2f284caaf264c6c74e9d8c8046ce9559789d
parents f7288e70 a55f637a
No related branches found
No related tags found
No related merge requests found
...@@ -151,6 +151,10 @@ userdebug_or_eng(` ...@@ -151,6 +151,10 @@ userdebug_or_eng(`
}:{ dir file lnk_file } { getattr open read }; }:{ dir file lnk_file } { getattr open read };
') ')
# Temporary auditing to get data on what apps use execmod.
# TODO(b/111544476) Remove this and deny the permission if feasible.
auditallow untrusted_app_all { apk_data_file app_data_file asec_public_file }:file execmod;
# Attempts to write to system_data_file is generally a sign # Attempts to write to system_data_file is generally a sign
# that apps are attempting to access encrypted storage before # that apps are attempting to access encrypted storage before
# the ACTION_USER_UNLOCKED intent is delivered. Suppress this # the ACTION_USER_UNLOCKED intent is delivered. Suppress this
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment