Remove duplicate neverallow rules.
These neverallow rules are exact duplicates of neverallow rules which occur earlier in the file. Change-Id: I75e3d84109f26374257741425f8de638a15f2741
This commit is contained in:
parent
a00ed2b2fd
commit
1f690c6ac9
1 changed files with 0 additions and 4 deletions
|
@ -144,10 +144,6 @@ neverallow untrusted_app sysfs_mac_address:file no_rw_file_perms;
|
|||
neverallow untrusted_app { cache_file cache_recovery_file }:dir ~{ r_dir_perms };
|
||||
neverallow untrusted_app { cache_file cache_recovery_file }:file ~{ read getattr };
|
||||
|
||||
# Do not allow untrusted_app to set system properties.
|
||||
neverallow untrusted_app property_socket:sock_file write;
|
||||
neverallow untrusted_app property_type:property_service set;
|
||||
|
||||
# Do not allow untrusted_app to create/unlink files outside of its sandbox,
|
||||
# internal storage or sdcard.
|
||||
# World accessible data locations allow application to fill the device
|
||||
|
|
Loading…
Reference in a new issue