Skip to content
Snippets Groups Projects
Commit fa3eb773 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

Revert "Audit execution of app_data_file native code."

This reverts commit 89041472.

Unittest failures of JvmtiHostTest1906#testJvmti. To do a clean revert
of b3624743, we need to also revert this
change.

Test: compiles
Bug: 121333210
Bug: 111338677
parent 49ff99ff
No related branches found
No related tags found
No related merge requests found
...@@ -49,7 +49,6 @@ allow untrusted_app_25 { apk_data_file app_data_file asec_public_file }:file exe ...@@ -49,7 +49,6 @@ allow untrusted_app_25 { apk_data_file app_data_file asec_public_file }:file exe
# directories for targetApi<=25. This is also allowed for targetAPIs 26, # directories for targetApi<=25. This is also allowed for targetAPIs 26,
# 27, and 28 in untrusted_app_27.te. # 27, and 28 in untrusted_app_27.te.
allow untrusted_app_25 app_data_file:file { execute execute_no_trans }; allow untrusted_app_25 app_data_file:file { execute execute_no_trans };
userdebug_or_eng(`auditallow untrusted_app_25 app_data_file:file { execute execute_no_trans };')
# The ability to invoke dex2oat. Historically required by ART, now only # The ability to invoke dex2oat. Historically required by ART, now only
# allowed for targetApi<=28 for compat reasons. # allowed for targetApi<=28 for compat reasons.
......
...@@ -30,7 +30,6 @@ bluetooth_domain(untrusted_app_27) ...@@ -30,7 +30,6 @@ bluetooth_domain(untrusted_app_27)
# The ability to call exec() or dlopen() on files in the apps home # The ability to call exec() or dlopen() on files in the apps home
# directories for targetApi 26, 27, and 28. # directories for targetApi 26, 27, and 28.
allow untrusted_app_27 app_data_file:file { execute execute_no_trans }; allow untrusted_app_27 app_data_file:file { execute execute_no_trans };
userdebug_or_eng(`auditallow untrusted_app_27 app_data_file:file { execute execute_no_trans };')
# The ability to invoke dex2oat. Historically required by ART, now only # The ability to invoke dex2oat. Historically required by ART, now only
# allowed for targetApi<=28 for compat reasons. # allowed for targetApi<=28 for compat reasons.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment