Skip to content
Snippets Groups Projects
user avatar
Nick Kralevich authored
system_file_type is a new attribute used to identify files which exist
on the /system partition. It's useful for allow rules in init, which are
based off of a blacklist of writable files. Additionally, it's useful
for constructing neverallow rules to prevent regressions.

Additionally, add commented out tests which enforce that all files on
the /system partition have the system_file_type attribute. These tests
will be uncommented in a future change after all the device-specific
policies are cleaned up.

Test: Device boots and no obvious problems.
Change-Id: Id9bae6625f042594c8eba74ca712abb09702c1e5
5e37271d
Name Last commit Last update
..
adbd.te
app.te
asan_extract.te
attributes
audioserver.te
blkid.te
blkid_untrusted.te
bluetooth.te
bootanim.te
bootstat.te
bufferhubd.te
cameraserver.te
charger.te
clatd.te
cppreopts.te
crash_dump.te
device.te
dex2oat.te
dhcp.te
display_service_server.te
dnsmasq.te
domain.te
drmserver.te
dumpstate.te
e2fs.te
ephemeral_app.te
fastbootd.te
file.te
fingerprintd.te
fsck.te
fsck_untrusted.te
gatekeeperd.te
global_macros
hal_allocator.te
hal_audio.te
hal_audiocontrol.te
hal_authsecret.te
hal_bluetooth.te
hal_bootctl.te
hal_broadcastradio.te
hal_camera.te
hal_cas.te
hal_configstore.te
hal_confirmationui.te
hal_contexthub.te
hal_drm.te
hal_dumpstate.te
hal_evs.te
hal_fingerprint.te
hal_gatekeeper.te
hal_gnss.te
hal_graphics_allocator.te
hal_graphics_composer.te
hal_health.te
hal_health_storage.te
hal_ir.te
hal_keymaster.te
hal_light.te
hal_lowpan.te
hal_memtrack.te
hal_neuralnetworks.te
hal_neverallows.te
hal_nfc.te
hal_oemlock.te
hal_omx.te
hal_power.te
hal_secure_element.te
hal_sensors.te
hal_system_suspend.te
hal_telephony.te
hal_tetheroffload.te
hal_thermal.te
hal_tv_cec.te
hal_tv_input.te
hal_usb.te
hal_usb_gadget.te
hal_vehicle.te
hal_vibrator.te
hal_vr.te
hal_weaver.te
hal_wifi.te
hal_wifi_hostapd.te
hal_wifi_offload.te
hal_wifi_supplicant.te
healthd.te
hwservice.te
hwservicemanager.te
idmap.te
incident.te
incident_helper.te
incidentd.te
init.te
inputflinger.te
install_recovery.te
installd.te
ioctl_defines
ioctl_macros
isolated_app.te
kernel.te
keystore.te