From 09effc0d78dc63af6afee9d1c1b76b0abdf3c5e1 Mon Sep 17 00:00:00 2001 From: Alessandra Loro Date: Fri, 16 Dec 2022 15:25:04 +0000 Subject: [PATCH] Hide ro.debuggable and ro.secure from ephemeral and isolated applications Bug: 193912100 Bug: 265874811 Test: N/A Ignore-AOSP-First: cherry-pick for tm-qpr Change-Id: I916c9795d96e4a4a453f9aed5e380f11981804e9 Merged-In: I916c9795d96e4a4a453f9aed5e380f11981804e9 --- prebuilts/api/33.0/public/domain.te | 2 +- public/domain.te | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/prebuilts/api/33.0/public/domain.te b/prebuilts/api/33.0/public/domain.te index 40060754a..46e945686 100644 --- a/prebuilts/api/33.0/public/domain.te +++ b/prebuilts/api/33.0/public/domain.te @@ -129,7 +129,7 @@ get_prop(domain, soc_prop) get_prop(domain, socket_hook_prop) get_prop(domain, surfaceflinger_prop) get_prop(domain, telephony_status_prop) -get_prop({domain - untrusted_app_all }, userdebug_or_eng_prop) +get_prop({domain -untrusted_app_all userdebug_or_eng(`-isolated_app -ephemeral_app') }, userdebug_or_eng_prop) get_prop(domain, vendor_socket_hook_prop) get_prop(domain, vndk_prop) get_prop(domain, vold_status_prop) diff --git a/public/domain.te b/public/domain.te index 40060754a..46e945686 100644 --- a/public/domain.te +++ b/public/domain.te @@ -129,7 +129,7 @@ get_prop(domain, soc_prop) get_prop(domain, socket_hook_prop) get_prop(domain, surfaceflinger_prop) get_prop(domain, telephony_status_prop) -get_prop({domain - untrusted_app_all }, userdebug_or_eng_prop) +get_prop({domain -untrusted_app_all userdebug_or_eng(`-isolated_app -ephemeral_app') }, userdebug_or_eng_prop) get_prop(domain, vendor_socket_hook_prop) get_prop(domain, vndk_prop) get_prop(domain, vold_status_prop)