tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Hide ro.debuggable and ro.secure from ephemeral and isolated applications"

Browse source
This commit is contained in:
Alessandra Loro 2022-11-21 14:34:40 +00:00 committed by Gerrit Code Review
commit 790d6b99ee
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/app_neverallows.te
View file

@ -261,5 +261,7 @@ neverallow all_untrusted_apps incident_service:service_manager find;
# due to the specific logging use cases.
# Context: b/193912100
neverallow {
untrusted_app_all
all_untrusted_apps
-mediaprovider
-mediaprovider_app
} { userdebug_or_eng_prop }:file read;

2
private/domain.te
View file

@ -132,7 +132,7 @@ get_prop(domain, socket_hook_prop)
get_prop(domain, surfaceflinger_prop)
get_prop(domain, telephony_status_prop)
get_prop(domain, timezone_prop)
get_prop({domain - untrusted_app_all }, userdebug_or_eng_prop)
get_prop({domain -untrusted_app_all -isolated_app -ephemeral_app }, userdebug_or_eng_prop)
get_prop(domain, vendor_socket_hook_prop)
get_prop(domain, vndk_prop)
get_prop(domain, vold_status_prop)