Skip to content
Snippets Groups Projects
Commit fad50381 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Merge "Only the bluetooth app may run in the bluetooth domain"

am: 35fd3212

Change-Id: I2f2fa16dc59bcd3f13ed9525a6f68bc87d26ab3b
parents 072f3865 35fd3212
No related branches found
No related tags found
No related merge requests found
...@@ -597,7 +597,7 @@ neverallow { ...@@ -597,7 +597,7 @@ neverallow {
# Only domains spawned from zygote and runas may have the appdomain attribute. # Only domains spawned from zygote and runas may have the appdomain attribute.
neverallow { domain -runas -webview_zygote -zygote } { neverallow { domain -runas -webview_zygote -zygote } {
appdomain -shell userdebug_or_eng(`-su') -bluetooth appdomain -shell userdebug_or_eng(`-su')
}:process { transition dyntransition }; }:process { transition dyntransition };
# Minimize read access to shell- or app-writable symlinks. # Minimize read access to shell- or app-writable symlinks.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment