tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "priv_app: Remove permission to read from /data/anr/traces.txt" am: 2e5ce26f17 am: 33f9e754c9

Browse source 
Change-Id: I33e72a8c28031c3c97f60ea2258c646def8bdcf8
This commit is contained in:
Automerger Merge Worker 2020-01-17 03:39:26 +00:00
commit 872c4b45fa
1 changed files with 0 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
private/priv_app.te
View file

@ -72,13 +72,6 @@ allow priv_app trace_data_file:file { getattr read };
allow priv_app { apk_tmp_file apk_private_tmp_file }:dir r_dir_perms; allow priv_app { apk_tmp_file apk_private_tmp_file }:dir r_dir_perms;
allow priv_app { apk_tmp_file apk_private_tmp_file }:file r_file_perms; allow priv_app { apk_tmp_file apk_private_tmp_file }:file r_file_perms;
# b/18504118: Allow reads from /data/anr/traces.txt
allow priv_app anr_data_file:file r_file_perms;
# b/142672293: No other priv-app should need this allow rule now that GMS core runs in its own domain.
userdebug_or_eng(`
auditallow priv_app anr_data_file:file r_file_perms;
')
# For AppFuse. # For AppFuse.
allow priv_app vold:fd use; allow priv_app vold:fd use;
allow priv_app fuse_device:chr_file { read write }; allow priv_app fuse_device:chr_file { read write };