| commit | 158e176c5aca6dd0969586f62a86f00827fe96b0 | [log] [tgz] |
|---|---|---|
| author | A. Cody Schuffelen <schuffelen@google.com> | Tue Feb 18 15:26:44 2020 -0800 |
| committer | Alistair Delva <adelva@google.com> | Fri Mar 13 15:55:05 2020 +0000 |
| tree | aafba40627b35bf720444ede6fa1d6599da79633 | |
| parent | 59b996c2774d51625eabcb409f79934c6da1d2cd [diff] |
Add sepolicy for the securityfs mount type. See discussion in aosp/1233645. There was a concern about this filesystem automounting when enabled, so this change adds sepolicy to preemptively lock it down. I'm not confident it actually automounts. If it does, it'll land in /sys/kernel/security, which is also protected with the sysfs policy. Test: Builds Bug: 148102533 Change-Id: I78a246a5c18953f2471f84367ab383afb2742908 Merged-In: I78a246a5c18953f2471f84367ab383afb2742908