Change-Id: Ieda312d5607dd17af0bb70045fbaba8ddec38c94
This commit is contained in:
Nick Kralevich 2013-10-25 16:53:37 -07:00
parent c4a3b51062
commit 73c5ea722c

2
app.te
View file

@ -202,7 +202,7 @@ neverallow { appdomain -unconfineddomain } zygote_socket:sock_file write;
neverallow { appdomain -unconfineddomain } { domain -appdomain }:process ptrace;
# Write access to /proc/pid entries for any non-app domain.
neverallow { appdomain -unconfineddomain } { domain - appdomain }:file write;
neverallow { appdomain -unconfineddomain } { domain -appdomain }:file write;
# signal access to non-app domains.
# sigchld allowed for parent death notification.