tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Continuation of 9b2e0cbeea

Browse source 
9b2e0cbeea changed all uses of capability
to global_capability_class_set but accidentally omitted one entry.
Fix the one entry.

Test: policy compiles.
Change-Id: I1bb8c494a2660d9f02783c93b07d4238a2575106
This commit is contained in:
Nick Kralevich 2017-11-22 09:59:08 -08:00
parent b6a05a93c1
commit df642bef22
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/system_server.te
View file

@ -787,8 +787,7 @@ neverallow system_server { domain -system_server }:process ptrace;
# CAP_SYS_RESOURCE was traditionally needed for sensitive /proc/PID # CAP_SYS_RESOURCE was traditionally needed for sensitive /proc/PID
# file read access. However, that is now unnecessary (b/34951864) # file read access. However, that is now unnecessary (b/34951864)
# This neverallow can be removed after b/34951864 is fixed. neverallow system_server system_server:global_capability_class_set sys_resource;
neverallow system_server system_server:capability sys_resource;
# TODO(b/67468181): Remove following lines upon resolution of this bug # TODO(b/67468181): Remove following lines upon resolution of this bug
dontaudit system_server statscompanion_service:service_manager { add find }; dontaudit system_server statscompanion_service:service_manager { add find };