diff options
| author | Nick Kralevich <nnk@google.com> | 2017-10-09 23:42:47 +0000 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2017-10-09 23:42:47 +0000 |
| commit | fddf38b15e4eaf5faab95413300f53fc2a5c717d (patch) | |
| tree | ac3badcd6711d5840a709645dcf0f7683d5a7bde | |
| parent | d7a6b5c66a278407228546a467c5e02e3f124b80 (diff) | |
| parent | 551cbe6ab20d8b4afe51c5749368b52fa582e778 (diff) | |
| download | dragon-fddf38b15e4eaf5faab95413300f53fc2a5c717d.tar.gz | |
Restrict isolated_app's /sys access am: 29c6d8c1ab
am: 551cbe6ab2
Change-Id: I46cd4ee77bb43f76e44333cff33cd12fd5b4d508
| -rw-r--r-- | sepolicy/domain.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sepolicy/domain.te b/sepolicy/domain.te index bddbd2f..d09fe8d 100644 --- a/sepolicy/domain.te +++ b/sepolicy/domain.te @@ -1,2 +1,2 @@ allow domain sysfs_socinfo:dir r_dir_perms; -allow domain sysfs_socinfo:file r_file_perms; +allow { domain -isolated_app } sysfs_socinfo:file r_file_perms; |