Skip to content
Snippets Groups Projects
Commit b62b2020 authored by Nick Kralevich's avatar Nick Kralevich Committed by Gerrit Code Review
Browse files

Merge "domain: relax execmod restrictions"

parents 386a0f09 998ce77f
No related branches found
No related tags found
No related merge requests found
......@@ -390,10 +390,13 @@ neverallow { domain userdebug_or_eng(`-dumpstate -shell -su') } su_exec:file no_
# which, long term, need to go away.
neverallow domain {
file_type
-system_file # needs to die. b/20013628
-system_data_file
-apk_data_file
-app_data_file
-asec_public_file
}:file execmod;
neverallow { domain -appdomain } file_type:file execmod;
# TODO: prohibit non-zygote spawned processes from using shared libraries
# with text relocations. b/20013628 .
# neverallow { domain -appdomain } file_type:file execmod;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment