tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Neverallow vendor_init from accessing stats_data_file

Browse source 
The exception for vendor_init in this neverallow was never needed.

Bug: 62875318
Test: Build walleye, bullhead
Change-Id: Iac2b57df30b376492851d7520994e0400a87f1e1
This commit is contained in:
Tom Cherry 2018-01-25 11:40:58 -08:00
parent 715c3a78d2
commit c2653ae86d
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/statsd.te
View file

@ -89,7 +89,7 @@ neverallow {
# Only statsd and the other root services in limited circumstances.
# can get to the files in /data/misc/stats-data, /data/misc/stats-service.
# Other services are prohibitted from accessing the file.
neverallow { domain -statsd -init -vold -vendor_init } stats_data_file:file *;
neverallow { domain -statsd -init -vold } stats_data_file:file *;
# Limited access to the directory itself.
neverallow { domain -statsd -init -vold -vendor_init } stats_data_file:dir *;
neverallow { domain -statsd -init -vold } stats_data_file:dir *;