Merge "Update neverallow exception." am: 3680f835b9 am: 084d1cd753

am: 905d53c71f Change-Id: I4174e730524cb161b745e23c60729e4b839a10a4
2018-01-08 21:35:31 +00:00 · 2018-01-08 21:35:31 +00:00 · d4a9d2c313
commit d4a9d2c313
parent f175b490b8 905d53c71f
1 changed files with 3 additions and 1 deletions
--- a/public/domain.te
+++ b/public/domain.te
@ -1116,10 +1116,12 @@ neverallow ~coredomain coredomain_hwservice:hwservice_manager add;
 neverallow * same_process_hwservice:hwservice_manager add;

 # On TREBLE devices, most coredomains should not access vendor_files.
+# TODO(b/71553434): Remove exceptions here.
 full_treble_only(`
  neverallow {
    coredomain
-    -halclientdomain
+    -appdomain
+    -bootanim
    -init
    -ueventd
    -crash_dump