sepolicy: whitelist recovery from node creation neverallow
Change-Id: If91584e58f3709c0b18eaf9ee12a0c057716f9f3
This commit is contained in:
parent
c90dc61dc6
commit
7ab2f8088f
2 changed files with 2 additions and 0 deletions
|
@ -375,6 +375,7 @@ neverallow {
|
|||
-init
|
||||
-ueventd
|
||||
-vold
|
||||
-recovery
|
||||
} self:global_capability_class_set mknod;
|
||||
|
||||
# No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
|
||||
|
|
|
@ -361,6 +361,7 @@ neverallow {
|
|||
-init
|
||||
-ueventd
|
||||
-vold
|
||||
-recovery
|
||||
} self:global_capability_class_set mknod;
|
||||
|
||||
# No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
|
||||
|
|
Loading…
Reference in a new issue