commit | 69fcac4c7ea6ac83a37e663d7a52d9ca3557560a | [log] [tgz] |
---|---|---|
author | Tom Cherry <tomcherry@google.com> | Wed Apr 29 11:29:54 2020 -0700 |
committer | Tom Cherry <tomcherry@google.com> | Wed Apr 29 14:02:43 2020 -0700 |
tree | 92a27ca60f916d53c02a8e8eb4af5eccbf43c19f | |
parent | 2ea9264ea3ed4f7381a56c5127952c0652b1582c [diff] |
Prevent transition to coredomain except for system files and vice versa Add a neverallow to prevent coredomain from accessing entrypoint for files other than system_file_type and postinstall_file. Add the complementary neverallow to prevent domains other than coredomain from accessing entrypoint for files other than vendor_file_type and init_exec (for vendor_init). Bug: 155124994 Test: build Change-Id: I6e0cb7fb445b96b82e434e949b59c299aee1ad8b