sepolicy: whitelist recovery from node creation neverallow

Change-Id: If91584e58f3709c0b18eaf9ee12a0c057716f9f3
This commit is contained in:
Alessandro Astone 2019-03-30 22:15:39 +01:00 committed by zlewchan
parent c90dc61dc6
commit 7ab2f8088f
2 changed files with 2 additions and 0 deletions

View file

@ -375,6 +375,7 @@ neverallow {
-init
-ueventd
-vold
-recovery
} self:global_capability_class_set mknod;
# No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).

View file

@ -361,6 +361,7 @@ neverallow {
-init
-ueventd
-vold
-recovery
} self:global_capability_class_set mknod;
# No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).