commit | 3680f835b9b86999242a44e3792c32a896cce4fc | [log] [tgz] |
---|---|---|
author | Treehugger Robot <treehugger-gerrit@google.com> | Mon Jan 08 17:23:15 2018 +0000 |
committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Mon Jan 08 17:23:15 2018 +0000 |
tree | b4aec183bdb0cd913e224ca1781157539cf56ac5 | |
parent | 060586362ba070ddb2795ea1ff14bc5369380465 [diff] | |
parent | 8d92a9a16c7783932693527dc4ac97aa2565ce65 [diff] |
Merge "Update neverallow exception."
diff --git a/public/domain.te b/public/domain.te index f9b6688..142c10b 100644 --- a/public/domain.te +++ b/public/domain.te
@@ -1116,10 +1116,12 @@ neverallow * same_process_hwservice:hwservice_manager add; # On TREBLE devices, most coredomains should not access vendor_files. +# TODO(b/71553434): Remove exceptions here. full_treble_only(` neverallow { coredomain - -halclientdomain + -appdomain + -bootanim -init -ueventd -crash_dump