tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Only allow supplemental_process to execute from read-only locations

Browse source 
Test: atest SupplementalProcessTest
Bug: 215105355

Ignore-AOSP-First: Cherry picking internally first to rename. Will be cherry-picked to AOSP right after.

Change-Id: I1b6d1a778cb658bdfd930b684e4ba0640031b226
Merged-In: I1b6d1a778cb658bdfd930b684e4ba0640031b226
(cherry picked from commit 8ea8587abb)
This commit is contained in:
Bram Bonne 2022-01-18 11:44:54 +01:00 committed by Nikita Ioffe
parent 7360c341f1
commit 718ac20edb
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/app.te
View file

@ -476,6 +476,7 @@ neverallow {
nfc
radio
shared_relro
supplemental_process
system_app
} {
data_file_type