PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "priv_app: Remove permissions for config_gz"

Browse Source
This commit is contained in:
Treehugger Robot 2020-01-27 22:44:13 +00:00 committed by Gerrit Code Review
commit 9baf6d6609
1 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
private/priv_app.te
View File

@ -89,13 +89,6 @@ r_dir_file(priv_app, sysfs_zram)
r_dir_file(priv_app, rootfs)
# Allow GMS core to open kernel config for OTA matching through libvintf
allow priv_app config_gz:file { open read getattr };
# b/142672293: No other priv-app should need this allow rule now that GMS core runs in its own domain.
userdebug_or_eng(`
auditallow priv_app config_gz:file { open read getattr };
')
# access the mac address
allowxperm priv_app self:udp_socket ioctl SIOCGIFHWADDR;