tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

init.te: Don't allow mounting on top of /proc

Browse source 
Don't allow init to mount on top of /proc. See
https://android-review.googlesource.com/148295 for details.

Change-Id: I65f66b39f3a5bfb72facb9f716f4537ac2237af1
This commit is contained in:
Nick Kralevich 2015-04-25 15:54:11 -07:00
parent 90c64542a2
commit e05487acc3
1 changed files with 0 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
init.te
View file

@ -45,8 +45,6 @@ allow init self:capability sys_admin;
allow init rootfs:dir create_dir_perms; allow init rootfs:dir create_dir_perms;
allow init rootfs:dir mounton; allow init rootfs:dir mounton;
allow init proc:dir mounton;
# Mount on /dev/usb-ffs/adb. # Mount on /dev/usb-ffs/adb.
allow init device:dir mounton; allow init device:dir mounton;