tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

kernel.te: tighten entrypoint / execute_no_trans neverallow am: 02cfce49ae am: 74b8425929 am: 02e44d0e7e

Browse source 
am: b6c9f6ddd8

Change-Id: I75048848a689b485aa3c70c7b709da413393c00e
This commit is contained in:
Nick Kralevich 2016-10-31 15:42:21 +00:00 committed by android-build-merger
commit 77f64cc4c2
1 changed files with 1 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
public/kernel.te
View file

@ -87,9 +87,6 @@ neverallow * kernel:process { transition dyntransition };
# possible causes include:
# - The program is a kernel usermodehelper. In this case, define a domain
# for the program and domain_auto_trans() to it.
# - You failed to setcon u:r:init:s0 in your init.rc and thus your init
# program was left in the kernel domain and is now trying to execute
# some other program. Fix your init.rc file.
# - You are running an exploit which switched to the init task credentials
# and is then trying to exec a shell or other program. You lose!
neverallow kernel { file_type fs_type -rootfs }:file { entrypoint execute_no_trans };
neverallow kernel *:file { entrypoint execute_no_trans };