| commit | 082ced1951ed27dd480eeef7c6108b755a9bf5af | [log] [tgz] |
|---|---|---|
| author | Inseob Kim <inseob@google.com> | Thu Nov 12 16:42:30 2020 +0900 |
| committer | Inseob Kim <inseob@google.com> | Mon Dec 14 16:58:23 2020 +0900 |
| tree | 874f3b37bcf4623ea88235aa7e39c0daa9a14428 | |
| parent | ba862cdeb6aa3699037eccd3b838390989f84457 [diff] |
Make default_prop only readable from coredomain default_prop has been readable from coredomain and appdomain. It's too broad, because default_prop is a context for properties which don't have matching property_contexts entries. From now on, only coredomain can read default_prop. It's still broad, but at least random apps can't read default_prop anymore. Bug: 170590987 Test: SELinux denial boot test for internal devices Change-Id: Ieed7e60d7e4448705c70e4f1725b2290e4fbcb4a