tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

am e96c3abe: Add neverallow for mounting on proc

Browse source 
* commit 'e96c3abe2e86f3ecdfdb7770629e9f73ff1e96d1':
  Add neverallow for mounting on proc
This commit is contained in:
dcashman 2015-04-14 19:02:31 +00:00 committed by Android Git Automerger
commit 38885bc47a
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
domain.te
View file

@ -397,3 +397,5 @@ neverallow domain {
# TODO: prohibit non-zygote spawned processes from using shared libraries
# with text relocations. b/20013628 .
# neverallow { domain -appdomain } file_type:file execmod;
neverallow { domain -init } proc:{ file dir } mounton;