| commit | b8b4f5d649fb80adbad1e5f2329afc4f8e691816 | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Tue Nov 21 12:56:30 2017 -0800 |
| committer | Nick Kralevich <nnk@google.com> | Mon Nov 27 09:01:36 2017 -0800 |
| tree | 3a1d5a9e46577a2e84605bf93a44ee0a48430918 | |
| parent | df642bef221846b77649bc2dab9f76e78de35956 [diff] |
Clean up old file-based OTA SELinux rules Remove a number of SELinux rules which were required to support file based OTA. After this, we can have a much stronger assertion that files on /system are immutable. Tighten up the neverallow rules at the same time. Bug: 35853185 Bug: 15575013 Bug: 69664758 Test: adb reboot recovery && adb sideload [file] Change-Id: I22aa208859b8478a2a90e1ed1c0f0d6b62a6664e