tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow app to write to sdk_sandbox am: ce2b6da673

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2088023

Change-Id: I5a6b8e1ef58cfd92dd42ce5d772e1539b31bd4c2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Shiwangi Shah 2022-05-12 15:28:20 +00:00 committed by Automerger Merge Worker
commit 1cda41b83a
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
private/untrusted_app.te
View file

@ -14,3 +14,10 @@ app_domain(untrusted_app)
untrusted_app_domain(untrusted_app) untrusted_app_domain(untrusted_app)
net_domain(untrusted_app) net_domain(untrusted_app)
bluetooth_domain(untrusted_app) bluetooth_domain(untrusted_app)
# Allow webview to access fd shared by sdksandbox for experiments data
# TODO(b/229249719): Will not be supported in Android U
allow untrusted_app sdk_sandbox_data_file:fd use;
allow untrusted_app sdk_sandbox_data_file:file write;
neverallow untrusted_app sdk_sandbox_data_file:file { open create };