e31efd69c5
Make sure shared libraries we create export only the minimum number of symbols, and not a bit more. We want to be careful what SELinux APIs we (directly or indirectly) expose to other processes. Test: Android compiles. Link time restrictions only. Change-Id: Ia6d1788cd944b46f1e97f621f4466fb8ada29191
36 lines
782 B
Text
36 lines
782 B
Text
{
|
|
global:
|
|
fgetfilecon;
|
|
fsetfilecon;
|
|
freecon;
|
|
getcon;
|
|
getfilecon;
|
|
getpeercon;
|
|
getpidcon;
|
|
is_selinux_enabled;
|
|
lgetfilecon;
|
|
lsetfilecon;
|
|
selabel_close;
|
|
selabel_lookup;
|
|
selabel_open;
|
|
selinux_android_file_context_handle;
|
|
selinux_android_prop_context_handle;
|
|
selinux_android_restorecon;
|
|
selinux_android_restorecon_pkgdir;
|
|
selinux_android_setcontext;
|
|
selinux_android_set_sehandle;
|
|
selinux_android_service_context_handle;
|
|
selinux_check_access;
|
|
security_getenforce;
|
|
security_setenforce;
|
|
security_load_policy;
|
|
selinux_log_callback;
|
|
selinux_set_callback;
|
|
selinux_status_open;
|
|
selinux_status_updated;
|
|
setcon;
|
|
setexeccon;
|
|
setfilecon;
|
|
setfscreatecon;
|
|
local: *;
|
|
};
|