tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Restrict system_server_startup domain"

Browse source
This commit is contained in:
Treehugger Robot 2021-11-30 10:29:10 +00:00 committed by Gerrit Code Review
commit 825936c473
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/seapp_contexts
View file

@ -99,9 +99,11 @@
# inputs are matched on a key value rule line.
#
# only the system server can be in system_server domain
# only the system server can be assigned the system_server domains
neverallow isSystemServer=false domain=system_server
neverallow isSystemServer=false domain=system_server_startup
neverallow isSystemServer="" domain=system_server
neverallow isSystemServer="" domain=system_server_startup
# system domains should never be assigned outside of system uid
neverallow user=((?!system).)* domain=system_app