Remove duplicate neverallow rules.
am: 1f690c6
* commit '1f690c6ac9286860667c7dfcb4d4b80b59cf34f7':
Remove duplicate neverallow rules.
Change-Id: Id2d581fded5f879856f4b96cff4e323a2b0f13f7
This commit is contained in:
commit
51cdbab6e4
1 changed files with 0 additions and 4 deletions
|
@ -144,10 +144,6 @@ neverallow untrusted_app sysfs_mac_address:file no_rw_file_perms;
|
|||
neverallow untrusted_app { cache_file cache_recovery_file }:dir ~{ r_dir_perms };
|
||||
neverallow untrusted_app { cache_file cache_recovery_file }:file ~{ read getattr };
|
||||
|
||||
# Do not allow untrusted_app to set system properties.
|
||||
neverallow untrusted_app property_socket:sock_file write;
|
||||
neverallow untrusted_app property_type:property_service set;
|
||||
|
||||
# Do not allow untrusted_app to create/unlink files outside of its sandbox,
|
||||
# internal storage or sdcard.
|
||||
# World accessible data locations allow application to fill the device
|
||||
|
|
Loading…
Reference in a new issue