| commit | 7388575591ff2f55afa887851f5d593963b4552f | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Tue Nov 21 12:56:30 2017 -0800 |
| committer | Nick Kralevich <nnk@google.com> | Tue Nov 21 14:20:17 2017 -0800 |
| tree | 9e9ea2c4615079cd224e4334ce2f8299f36614b0 | |
| parent | 18cb4daed7d571e49839a72476e7cde2498c0768 [diff] |
Clean up old file-based OTA SELinux rules Remove a number of SELinux rules which were required to support file based OTA. After this, we can have a much stronger assertion that files on /system are immutable. Tighten up the neverallow rules at the same time. Bug: 35853185 Bug: 15575013 Test: adb reboot recovery && adb sideload [file] Change-Id: I4238d17808bed6a81f47e14eb1797496c07642e2