platform_system_sepolicy/private/coredomain.te
Steven Moreland 09fddac1d7 Disallow sysfs_leds to coredomains.
Bug: 70846424
Test: neverallow not tripped
Change-Id: I9e351ee906162a594930b5ab300facb5fe807f13
2018-01-18 18:10:06 -08:00

17 lines
271 B
Text

get_prop(coredomain, pm_prop)
get_prop(coredomain, exported_pm_prop)
full_treble_only(`
neverallow {
coredomain
-init
-vendor_init
# generic access to sysfs_type
-ueventd
-vold
-priv_app
-storaged
-system_app
} sysfs_leds:file *;
')