Remove media crash neverallow exception.
Unneeded. Bug: N/A Test: compile time Change-Id: I0557794a33ae942bd7764d5e41515d7d4bb77ed6
This commit is contained in:
parent
45b7782c2b
commit
7fd8933f0c
1 changed files with 1 additions and 13 deletions
|
@ -1029,19 +1029,7 @@ neverallow { domain -system_server -webview_zygote -app_zygote } webview_zygote:
|
||||||
neverallow { domain -system_server } webview_zygote:sock_file write;
|
neverallow { domain -system_server } webview_zygote:sock_file write;
|
||||||
neverallow { domain -system_server } app_zygote:sock_file write;
|
neverallow { domain -system_server } app_zygote:sock_file write;
|
||||||
|
|
||||||
neverallow {
|
neverallow domain tombstoned_crash_socket:unix_stream_socket connectto;
|
||||||
domain
|
|
||||||
-tombstoned
|
|
||||||
-crash_dump
|
|
||||||
-dumpstate
|
|
||||||
-incidentd
|
|
||||||
-system_server
|
|
||||||
|
|
||||||
# Processes that can't exec crash_dump
|
|
||||||
-hal_codec2_server
|
|
||||||
-hal_omx_server
|
|
||||||
-mediaextractor
|
|
||||||
} tombstoned_crash_socket:unix_stream_socket connectto;
|
|
||||||
|
|
||||||
# Never allow anyone except dumpstate, incidentd, or the system server to connect or write to
|
# Never allow anyone except dumpstate, incidentd, or the system server to connect or write to
|
||||||
# the tombstoned intercept socket.
|
# the tombstoned intercept socket.
|
||||||
|
|
Loading…
Reference in a new issue