tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "allow vendor to minimize area of module_load"

Browse source 
am: 9911bd8929

Change-Id: Id66e9910fd60887b414eed88382bc8f6a966b85a
This commit is contained in:
Adam Shih 2019-10-28 18:41:38 -07:00 committed by android-build-merger
commit 64085f6f5c
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
public/domain.te
View file

@ -1271,7 +1271,7 @@ neverallow {
# Enforce restrictions on kernel module origin.
# Do not allow kernel module loading except from system,
# vendor, and boot partitions.
neverallow * ~{ system_file vendor_file rootfs }:system module_load;
neverallow * ~{ system_file_type vendor_file_type rootfs }:system module_load;
# Only allow filesystem caps to be set at build time. Runtime changes
# to filesystem capabilities are not permitted.