tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Don't run vzwomatrigger_app in permissive mode

Browse source 
This change enforces all the defined rules for the vzwomatrigger_app
domain and unsets permissive mode. There have not been any new denials
in the past weeks for this domain (source: go/sedenials), and hence this
domain appears to not need any new permissions.

Bug: 142672293
Test: Green builds
Change-Id: I588b4e3038a3e8188d97183a592f9023a95dd3a8
This commit is contained in:
Ashwini Oruganti 2019-12-02 09:34:18 -08:00
parent 243797950e
commit b7c81c04c0
1 changed files with 0 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
private/vzwomatrigger_app.te
View file

@ -3,12 +3,4 @@
###
type vzwomatrigger_app, domain;
# Allow everything.
# TODO(b/142672293): remove when no selinux denials are triggered for this
# domain
# STOPSHIP(b/142672293): monitor http://go/sedenials for any denials around
# `vzwomatrigger_app` and remove this line once we are confident about
# this having the right set of permissions.
userdebug_or_eng(`permissive vzwomatrigger_app;')
app_domain(vzwomatrigger_app)