Merge "Mark shell as system_executes_vendor_violators." am: 65565c1cfd
am: 6029d32912
Change-Id: Id07eb16687af45c9013ca56c3890d5f7f2beff59
This commit is contained in:
commit
236e1b7ee4
1 changed files with 2 additions and 0 deletions
|
@ -186,6 +186,8 @@ allow shell service_contexts_file:file r_file_perms;
|
||||||
allow shell sepolicy_file:file r_file_perms;
|
allow shell sepolicy_file:file r_file_perms;
|
||||||
|
|
||||||
# Allow shell to start up vendor shell
|
# Allow shell to start up vendor shell
|
||||||
|
# TODO(b/62041836): system processes should not run vendor executables.
|
||||||
|
typeattribute shell system_executes_vendor_violators;
|
||||||
allow shell vendor_shell_exec:file rx_file_perms;
|
allow shell vendor_shell_exec:file rx_file_perms;
|
||||||
|
|
||||||
###
|
###
|
||||||
|
|
Loading…
Reference in a new issue