Commit graph

4 commits

Author SHA1 Message Date
Nick Kralevich
6b3a308805 autoplay_app.te: remove debugfs write access
This should no longer be necessary due
to https://android-review.googlesource.com/185597

Change-Id: I2cd5fde8f1319684cc558e64ea5cdd230061367e
2015-12-14 14:02:40 -08:00
Jeff Vander Stoep
b7baa7fd2f autoplay_app: access to services and other permissions
Change-Id: I01bb0ad7c93e807cd76135bce554abf0908a54ab
2015-12-09 12:36:09 -08:00
Jeff Vander Stoep
ae72bf241d Populate autoplay_app with minimal set of permissions
Change-Id: Ia90fb531cfd99d49d179921f041dd93c7325ad50
2015-11-25 09:41:05 -08:00
Jeff Vander Stoep
400d3ac140 Add autoplay_app domain
Initial check in of empty autoplay_app.te policy file.

Create isAutoPlayApp input selector. Give this selector high precedence -
only below isSystemServer.

Add neverallow rule disallowing an app context with isAutoPlayApp=true from
running in a domain other than autoplay_app.

Change-Id: I1d06669d2f1acf953e50867dfa2b264ccaee29a4
2015-11-09 13:43:55 -08:00