Merge "Revoke zygote's read permission on keychain data" into lmp-mr1-dev
This commit is contained in:
commit
84354f2433
@ -21,9 +21,6 @@ allow zygote appdomain:process { getpgid setpgid };
|
||||
# Read system data.
|
||||
allow zygote system_data_file:dir r_dir_perms;
|
||||
allow zygote system_data_file:file r_file_perms;
|
||||
# Read system security data.
|
||||
allow zygote keychain_data_file:dir r_dir_perms;
|
||||
allow zygote keychain_data_file:file r_file_perms;
|
||||
# Write to /data/dalvik-cache.
|
||||
allow zygote dalvikcache_data_file:dir create_dir_perms;
|
||||
allow zygote dalvikcache_data_file:file create_file_perms;
|
||||
|
Loading…
Reference in New Issue
Block a user