Remove domain_deprecated from isolated_app am: 0b430aba22
am: bbc91a35ee
* commit 'bbc91a35eee6c39a042c505b7986706ae9f73b2d':
Remove domain_deprecated from isolated_app
Change-Id: I3e96e3b1c12902eb42ef9426cec5275cd6c9443d
This commit is contained in:
commit
a619ed8d82
3
app.te
3
app.te
@ -233,6 +233,9 @@ allowxperm { appdomain -bluetooth } self:{ rawip_socket tcp_socket udp_socket }
|
||||
|
||||
allow { appdomain -isolated_app } ion_device:chr_file rw_file_perms;
|
||||
|
||||
# TODO: switch to meminfo service
|
||||
allow appdomain proc_meminfo:file r_file_perms;
|
||||
|
||||
# For app fuse.
|
||||
allow appdomain app_fuse_file:file { getattr read append write };
|
||||
|
||||
|
@ -9,7 +9,7 @@
|
||||
### additional following rules:
|
||||
###
|
||||
|
||||
type isolated_app, domain, domain_deprecated;
|
||||
type isolated_app, domain;
|
||||
app_domain(isolated_app)
|
||||
|
||||
# Access already open app data files received over Binder or local socket IPC.
|
||||
|
@ -89,9 +89,6 @@ userdebug_or_eng(`
|
||||
# gdbserver for ndk-gdb ptrace attaches to app process.
|
||||
allow untrusted_app self:process ptrace;
|
||||
|
||||
# TODO: switch to meminfo service
|
||||
allow untrusted_app proc_meminfo:file r_file_perms;
|
||||
|
||||
# access /proc/net/xt_qtguid/stats
|
||||
r_dir_file(untrusted_app, proc_net)
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user