PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sepolicy: Fix comment on apexd:fd use

Browse Source 
The file descriptors for /dev/zero are no longer open. However,
a descriptor to the shell is still inherited. Update the comment.

Bug: 126787589
Test: m
Test: manual
Change-Id: I0d4518d2ba771622ea969bbf02827db45788bc09
This commit is contained in:
Andreas Gampe 2019-03-11 11:01:11 -07:00
parent 5a74473d1b
commit 15e02450f1
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
private/art_apex_postinstall.te
View File

@ -4,7 +4,7 @@
type art_apex_postinstall, domain, coredomain;
type art_apex_postinstall_exec, system_file_type, exec_type, file_type;
# /dev/zero
# /system/bin/sh (see b/126787589).
allow art_apex_postinstall apexd:fd use;
# Read temp dirs and files. Move directories.

2
private/art_apex_preinstall.te
View File

@ -4,7 +4,7 @@
type art_apex_preinstall, domain, coredomain;
type art_apex_preinstall_exec, system_file_type, exec_type, file_type;
# /dev/zero
# /system/bin/sh (see b/126787589).
allow art_apex_preinstall apexd:fd use;
# Create temp dirs and files under /data/ota.