tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Prevent sandbox executing from sdk_sandbox_data_file" into tm-dev

Browse source
This commit is contained in:
Bram Bonné 2022-05-04 08:01:03 +00:00 committed by Android (Google) Code Review
commit c5ae3ca682
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/sdk_sandbox.te
View file

@ -110,7 +110,7 @@ allow sdk_sandbox sdk_sandbox_data_file:file create_file_perms;
### neverallow rules
###
neverallow sdk_sandbox { app_data_file privapp_data_file }:file { execute execute_no_trans };
neverallow sdk_sandbox { app_data_file privapp_data_file sdk_sandbox_data_file }:file { execute execute_no_trans };
# Receive or send uevent messages.
neverallow sdk_sandbox domain:netlink_kobject_uevent_socket *;