5637099a25
As has already been done for untrusted_app, isolated_app, and bluetooth, make all the other domains used for app processes confined while making them permissive until sufficient testing has been done. Change-Id: If55fe7af196636c49d10fc18be2f44669e2626c5 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
16 lines
388 B
Text
16 lines
388 B
Text
###
|
|
### Apps signed with the release key (testkey in AOSP).
|
|
###
|
|
|
|
type release_app, domain;
|
|
permissive release_app;
|
|
app_domain(release_app)
|
|
platform_app_domain(release_app)
|
|
# Access the network.
|
|
net_domain(release_app)
|
|
# Access bluetooth.
|
|
bluetooth_domain(release_app)
|
|
|
|
# Write to /cache.
|
|
allow release_app cache_file:dir rw_dir_perms;
|
|
allow release_app cache_file:file create_file_perms;
|