diff options
| author | Nick Kralevich <nnk@google.com> | 2017-10-09 23:49:46 +0000 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2017-10-09 23:49:46 +0000 |
| commit | 4ce6a9040883ba22ec0efd29db9f21c39a54aeda (patch) | |
| tree | 9135ec66eb3c8eeea97be9bfba60237581fe848b | |
| parent | 6c94033f42cc05ecf9036d9f21f15a8e9499138c (diff) | |
| parent | fddf38b15e4eaf5faab95413300f53fc2a5c717d (diff) | |
| download | dragon-4ce6a9040883ba22ec0efd29db9f21c39a54aeda.tar.gz | |
Restrict isolated_app's /sys access am: 29c6d8c1ab am: 551cbe6ab2
am: fddf38b15e
Change-Id: Ic1b7f4bb7b2931a80c69f5d020f1b9635d44dd22
| -rw-r--r-- | sepolicy/domain.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sepolicy/domain.te b/sepolicy/domain.te index bddbd2f..d09fe8d 100644 --- a/sepolicy/domain.te +++ b/sepolicy/domain.te @@ -1,2 +1,2 @@ allow domain sysfs_socinfo:dir r_dir_perms; -allow domain sysfs_socinfo:file r_file_perms; +allow { domain -isolated_app } sysfs_socinfo:file r_file_perms; |