tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Hide ro.debuggable and ro.secure from ephemeral and isolated applications

Browse source 
Bug: 193912100
Test: N/A

Change-Id: I916c9795d96e4a4a453f9aed5e380f11981804e9
This commit is contained in:
Alessandra Loro 2022-11-18 14:09:41 +00:00
parent dcef71f890
commit 24d90e792e
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/app_neverallows.te
View file

@ -261,5 +261,7 @@ neverallow all_untrusted_apps incident_service:service_manager find;
# due to the specific logging use cases.
# Context: b/193912100
neverallow {
untrusted_app_all
all_untrusted_apps
-mediaprovider
-mediaprovider_app
} { userdebug_or_eng_prop }:file read;

2
private/domain.te
View file

@ -132,7 +132,7 @@ get_prop(domain, socket_hook_prop)
get_prop(domain, surfaceflinger_prop)
get_prop(domain, telephony_status_prop)
get_prop(domain, timezone_prop)
get_prop({domain - untrusted_app_all }, userdebug_or_eng_prop)
get_prop({domain -untrusted_app_all -isolated_app -ephemeral_app }, userdebug_or_eng_prop)
get_prop(domain, vendor_socket_hook_prop)
get_prop(domain, vndk_prop)
get_prop(domain, vold_status_prop)