Skip to content
Snippets Groups Projects
Commit dedf970d authored by Peter Enderborg's avatar Peter Enderborg Committed by android-build-merger
Browse files

Merge "Restrict functions for vold" 

am: 8a441b6a

Change-Id: I89376d2a0a34496ec5f2e816c94b3d185ba7570d
parents 89a09b36 8a441b6a
Branches
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
Showing
with 2 additions and 0 deletions
public/vold.te
+ 2
− 0
View file @ dedf970d
...@@ -190,3 +190,5 @@ neverallow { domain -vold -init } restorecon_prop:property_service set; ...@@ -190,3 +190,5 @@ neverallow { domain -vold -init } restorecon_prop:property_service set;
neverallow vold fsck_exec:file execute_no_trans; neverallow vold fsck_exec:file execute_no_trans;
neverallow { domain -init } vold:process { transition dyntransition }; neverallow { domain -init } vold:process { transition dyntransition };
neverallow vold *:process ptrace;
neverallow vold *:rawip_socket *;
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment