tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "incident_service: only disallow untrusted access" into rvc-dev

Browse source
This commit is contained in:
Jeffrey Vander Stoep 2020-05-18 08:19:19 +00:00 committed by Android (Google) Code Review
commit 6dc1e5f472
4 changed files with 6 additions and 30 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
prebuilts/api/30.0/private/app_neverallows.te
View file

@ -257,3 +257,6 @@ neverallow {
-untrusted_app_25
-untrusted_app_27
} mnt_sdcard_file:lnk_file *;
# Only privileged apps may find the incident service
neverallow all_untrusted_apps incident_service:service_manager find;

15
prebuilts/api/30.0/private/incidentd.te
View file

@ -179,21 +179,6 @@ userdebug_or_eng(`
###
### neverallow rules
###
# only specific domains can find the incident service
neverallow {
domain
-dumpstate
-incident
-incidentd
-perfetto
-permissioncontroller_app
-priv_app
-statsd
-system_app
-system_server
} incident_service:service_manager find;
# only incidentd and the other root services in limited circumstances
# can get to the files in /data/misc/incidents
#

3
private/app_neverallows.te
View file

@ -257,3 +257,6 @@ neverallow {
-untrusted_app_25
-untrusted_app_27
} mnt_sdcard_file:lnk_file *;
# Only privileged apps may find the incident service
neverallow all_untrusted_apps incident_service:service_manager find;

15
private/incidentd.te
View file

@ -179,21 +179,6 @@ userdebug_or_eng(`
###
### neverallow rules
###
# only specific domains can find the incident service
neverallow {
domain
-dumpstate
-incident
-incidentd
-perfetto
-permissioncontroller_app
-priv_app
-statsd
-system_app
-system_server
} incident_service:service_manager find;
# only incidentd and the other root services in limited circumstances
# can get to the files in /data/misc/incidents
#