Merge "Mark shell as system_executes_vendor_violators." am: 65565c1cfd

am: 6029d32912

Change-Id: Id07eb16687af45c9013ca56c3890d5f7f2beff59
This commit is contained in:
Tri Vo 2018-01-18 02:27:19 +00:00 committed by android-build-merger
commit 236e1b7ee4

View file

@ -186,6 +186,8 @@ allow shell service_contexts_file:file r_file_perms;
allow shell sepolicy_file:file r_file_perms; allow shell sepolicy_file:file r_file_perms;
# Allow shell to start up vendor shell # Allow shell to start up vendor shell
# TODO(b/62041836): system processes should not run vendor executables.
typeattribute shell system_executes_vendor_violators;
allow shell vendor_shell_exec:file rx_file_perms; allow shell vendor_shell_exec:file rx_file_perms;
### ###