0130154985
Some file types used as domain entrypoints were missing the exec_type attribute. Add it and add a neverallow rule to keep it that way. Change-Id: I7563f3e03940a27ae40ed4d6bb74181c26148849 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
7 lines
183 B
Text
7 lines
183 B
Text
type runas, domain;
|
|
type runas_exec, exec_type, file_type;
|
|
permissive runas;
|
|
unconfined_domain(runas)
|
|
|
|
# ndk-gdb invokes adb shell run-as.
|
|
domain_auto_trans(shell, runas_exec, runas)
|