| commit | 60575233bcba10e9a9063735cb1bcd747cf4730f | [log] [tgz] |
|---|---|---|
| author | Joel Galenson <jgalenson@google.com> | Mon Dec 11 15:05:52 2017 -0800 |
| committer | Joel Galenson <jgalenson@google.com> | Wed Jan 31 08:45:03 2018 -0800 |
| tree | 8049831095ba1440242f5237817ed4b759e6fa4a | |
| parent | 3506ad3f310d46ace11ecb9f1a0b6d8abc4951c4 [diff] |
Disallow most domains from getting dac_override and dac_read_search. Instead of getting these permissions, it is better to add the process to a group or change the permissions of the files it tries to access. Test: Built the policy for many devices. Change-Id: If023d98bcc479bebbedeedf525965ffb17a0e331