tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Apply full_treble_only to whole rule." am: 0fa0d1e596

Browse source 
am: 4aa78f8054

Change-Id: Ic2e376f3998d754d7e186d7cf82dcb1433b34203
This commit is contained in:
Tri Vo 2019-01-09 19:15:43 -08:00 committed by android-build-merger
commit e9f70f7c35
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
private/coredomain.te
View file

@ -178,7 +178,10 @@ full_treble_only(`
neverallow coredomain {
iio_device
radio_device
# TODO(b/120243891): HAL permission to tee_device is included into coredomain
# on non-Treble devices.
full_treble_only(`tee_device')
}:chr_file { open read append write ioctl };
# TODO(b/120243891): HAL permission to tee_device is included into coredomain
# on non-Treble devices.
full_treble_only(`
neverallow coredomain tee_device:chr_file { open read append write ioctl };
')