tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

am a893edae: Remove execmod access to system_file and exec_type.

Browse source 
* commit 'a893edae3716b33be62edf1b5f3336e6f6bb251b':
  Remove execmod access to system_file and exec_type.
This commit is contained in:
Stephen Smalley 2014-06-23 17:04:39 +00:00 committed by Android Git Automerger
commit f173a510fb
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
unconfined.te
View file

@ -61,10 +61,10 @@ allow unconfineddomain {
-app_data_file
}:{ dir lnk_file sock_file fifo_file } ~relabelto;
allow unconfineddomain exec_type:dir r_dir_perms;
allow unconfineddomain exec_type:file { r_file_perms execute execmod };
allow unconfineddomain exec_type:file { r_file_perms execute };
allow unconfineddomain exec_type:lnk_file r_file_perms;
allow unconfineddomain system_file:dir r_dir_perms;
allow unconfineddomain system_file:file { r_file_perms execute execmod };
allow unconfineddomain system_file:file { r_file_perms execute };
allow unconfineddomain system_file:lnk_file r_file_perms;
allow unconfineddomain {
fs_type