tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add neverallow for mounting on proc

Browse source 
Change-Id: Ie19ac00f2e96836667e8a5c18fafeaf6b6eadb25
This commit is contained in:
dcashman 2015-04-14 11:21:46 -07:00
parent dd156fc377
commit e96c3abe2e
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
domain.te
View file

@ -397,3 +397,5 @@ neverallow domain {
# TODO: prohibit non-zygote spawned processes from using shared libraries
# with text relocations. b/20013628 .
# neverallow { domain -appdomain } file_type:file execmod;
neverallow { domain -init } proc:{ file dir } mounton;