4 commits

Author	SHA1	Message	Date
Sandro Montanari	4db0e27a50	Introduce sdk_sandbox_audit SELinux domain ... Bug: 295861450 Test: atest CtsSdkSandboxInprocessTests and adb shell ps -Z Change-Id: I9c5873181c925c6b8ebb411328d30aa519053acf	2023-10-26 08:50:26 +00:00
Mugdha Lakhani	2ae45c5766	Create sdk_sandbox_all. ... Rename sdk_sandbox to sdk_sandbox_34. Additionally, Extract out parts of sdk_sandbox_34 to sdk_sandbox_all.te that will be shared with all sdk_sandbox domains. Bug: b/270148964 Test: atest PackageManagerLocalTest SdkSandboxDataIsolationHostTest SdkSandboxRestrictionsTest Change-Id: I36e0c8795148de83c81dfe12559452812aa2b25e	2023-05-09 15:11:39 +00:00
Martin Stjernholm	87143bd904	Revert "Introduce a new sdk_sandbox domain" ... This reverts commit 304962477a. Reason for revert: b/279565840 Change-Id: I6fc3a102994157ea3da751364f80730f4d0e87f0	2023-04-25 12:40:37 +00:00
Mugdha Lakhani	304962477a	Introduce a new sdk_sandbox domain ... Define the selinux domain to apply to SDK runtime for targetSdkVersion=34. The existing sdk_sandbox domain has been renamed to sdk_sandbox_next. Future CLs will add logic to apply one of these to the SDK runtime processes on the device, based on a flag. auditallow block from sdk_sandbox has been removed as we haven't yet measured the system health impact of adding this. It'll be added to an audit domain later after we've ruled out negative system health impact. Bug: 270148964 Test: make and boot the test device, load SDK using test app Change-Id: I7438fb16c1c5e85e30683e421ce463f9e0b1470d	2023-04-21 17:26:26 +00:00