Skip to content
Snippets Groups Projects
Commit c17d30a5 authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Delete dalvikcache_data_file write/setattr access from shell.


This showed up at some point in the past during our own
internal CTS testing but it seems wrong based on the DAC
permissions and a potential way to inject code into apps
from the shell.  Drop it for now and see if it shows up again.
This predates userdebug/eng vs user shell split so possibly
it only happens in the userdebug/eng case.

Change-Id: If8b1e7817f8efecbf68a0ba5fd06328a23a6c6db
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent d28ceeb0
No related branches found
No related tags found
No related merge requests found
...@@ -22,7 +22,6 @@ allow shelldomain shell_exec:file rx_file_perms; ...@@ -22,7 +22,6 @@ allow shelldomain shell_exec:file rx_file_perms;
allow shelldomain zygote_exec:file rx_file_perms; allow shelldomain zygote_exec:file rx_file_perms;
r_dir_file(shelldomain, apk_data_file) r_dir_file(shelldomain, apk_data_file)
allow shelldomain dalvikcache_data_file:file { write setattr };
# Set properties. # Set properties.
unix_socket_connect(shelldomain, property, init) unix_socket_connect(shelldomain, property, init)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment