Audit execution of app_data_file by untrusted_app.

Test: Builds
Bug: 126536482
Change-Id: I9fe7623353cbb980db3853a8979f03ba033c7f45
This commit is contained in:
Alan Stokes 2019-02-27 18:07:09 +00:00
parent 4108c665a1
commit 931623e5b9

View File

@ -24,6 +24,7 @@
# to their sandbox directory and then execute.
allow untrusted_app_all privapp_data_file:file { r_file_perms execute };
allow untrusted_app_all app_data_file:file { r_file_perms execute };
auditallow untrusted_app_all app_data_file:file execute;
# Chrome Crashpad uses the the dynamic linker to load native executables
# from an APK (b/112050209, crbug.com/928422)