tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private/compat/29.0
History
Alan Stokes 8bf8a262e5 Exempt older vendor images from recent mls changes. 
We no longer allow apps with mlstrustedsubject access to app_data_file
or privapp_data_file. For compatibility we grant access to all apps on
vendor images for SDK <= 30, whether mlstrustedsubject or not. (The
ones that are not already have access, but that is harmless.)

Additionally we have started adding categories to system_data_file
etc. We treat these older vendor apps as trusted for those types only.

The result is that apps on older vendor images still have all the
access they used to but no new access.

We add a neverallow to prevent the compatibility attribute being
abused.

Test: builds
Change-Id: I10a885b6a122292f1163961b4a3cf3ddcf6230ad
2020-11-17 17:30:10 +00:00
..
29.0.cil DO NOT MERGE Add fake 30.0 prebuilts 2020-05-11 13:18:52 +09:00
29.0.compat.cil Exempt older vendor images from recent mls changes. 2020-11-17 17:30:10 +00:00
29.0.ignore.cil Merge "sepolicy: label vendor_service_contexts as vendor_service_contexts_file" am: bc8ed95f69 am: 23068f2625 2020-06-16 09:37:41 +00:00