Label /system/usr/share/zoneinfo differently
/system/usr/share/zoneinfo is currently labeled zoneinfo_data_file, a label shared with /data/misc/zoneinfo. However, each of these directory locations has different security characteristics. In particular, the files in /system/usr/share/zoneinfo must never be writable, whereas /data/misc/zoneinfo may be written to by system_server. Reusing the same label hides these different security characteristics. Create a separate label for /system/usr/share/zoneinfo. Test: Device boots and no obvious problems. Change-Id: I8cf16ff038b06b38f77388e546d9b7a6865f7879
Showing
- private/compat/26.0/26.0.cil 3 additions, 1 deletionprivate/compat/26.0/26.0.cil
- private/compat/27.0/27.0.cil 3 additions, 1 deletionprivate/compat/27.0/27.0.cil
- private/compat/28.0/28.0.cil 3 additions, 1 deletionprivate/compat/28.0/28.0.cil
- private/file_contexts 1 addition, 1 deletionprivate/file_contexts
- public/domain.te 2 additions, 2 deletionspublic/domain.te
- public/file.te 2 additions, 0 deletionspublic/file.te
Loading
Please register or sign in to comment