Skip to content
Snippets Groups Projects
Commit e53b335d authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Remove direct qtaguid access from platform/system apps am: f3220aa6

am: e505a35d

Change-Id: I7183822e3930dc6ef1b995027d784831b74aaf9f
parents 0f59d0b1 e505a35d
No related branches found
No related tags found
No related merge requests found
...@@ -181,8 +181,6 @@ allow { ...@@ -181,8 +181,6 @@ allow {
untrusted_app_27 untrusted_app_27
ephemeral_app ephemeral_app
priv_app priv_app
system_app
platform_app
} proc_qtaguid_ctrl:file rw_file_perms; } proc_qtaguid_ctrl:file rw_file_perms;
# read /proc/net/xt_qtguid/*stat* to per-app network data usage. # read /proc/net/xt_qtguid/*stat* to per-app network data usage.
# Exclude isolated app which may not use network sockets. # Exclude isolated app which may not use network sockets.
...@@ -191,8 +189,6 @@ r_dir_file({ ...@@ -191,8 +189,6 @@ r_dir_file({
untrusted_app_27 untrusted_app_27
ephemeral_app ephemeral_app
priv_app priv_app
system_app
platform_app
}, proc_qtaguid_stat) }, proc_qtaguid_stat)
# Everybody can read the xt_qtaguid resource tracking misc dev. # Everybody can read the xt_qtaguid resource tracking misc dev.
# So allow all apps to read from /dev/xt_qtaguid. # So allow all apps to read from /dev/xt_qtaguid.
...@@ -201,8 +197,6 @@ allow { ...@@ -201,8 +197,6 @@ allow {
untrusted_app_27 untrusted_app_27
ephemeral_app ephemeral_app
priv_app priv_app
system_app
platform_app
} qtaguid_device:chr_file r_file_perms; } qtaguid_device:chr_file r_file_perms;
# Grant GPU access to all processes started by Zygote. # Grant GPU access to all processes started by Zygote.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment