tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

drop vold from sys_rawio neverallow exception

Browse source 
This does not appear needed anymore.

Change-Id: I3128ab610c742b18008f4cfc2a7116b210f770e7
This commit is contained in:
Nick Kralevich 2016-04-07 15:56:24 -07:00
parent 6c768d7487
commit 1df23cbf8e
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
domain.te
View file

@ -165,7 +165,7 @@ neverallow {
} self:capability mknod;
# Limit raw I/O to these whitelisted domains.
neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -vold -uncrypt -tee } self:capability sys_rawio;
neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -uncrypt -tee } self:capability sys_rawio;
# No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
neverallow * self:memprotect mmap_zero;