commit 5dc2c8c7402e75749025b72d150a6e3c34041de5
author Yabin Cui <yabinc@google.com> Fri Nov 02 11:12:43 2018 -0700
committer Yabin Cui <yabinc@google.com> Wed Nov 07 18:07:18 2018 +0000
tree 86ef65ebb64e14d0c4f5adc02e80a61888263347
parent 2bb0085dbd1de6ca1fea802d0ea68f6075563aba

Revert "Revert "Enforce execve() restrictions for API > 28""

This reverts commit 15d1a12f7f57f589c2f1401f8e72813546fd8dda.

Bug: 118737210
Bug: 112357170
Test: boot marlin
Change-Id: Idcfab04b48f843eead4efa9f58a1337c6685c6ca

private/seapp_contexts

diff --git a/private/seapp_contexts b/private/seapp_contexts
index d0cf2a5..821ef0c 100644
--- a/private/seapp_contexts
+++ b/private/seapp_contexts
@@ -114,6 +114,7 @@
 user=_app seinfo=platform domain=platform_app type=app_data_file levelFrom=user
 user=_app isV2App=true isEphemeralApp=true domain=ephemeral_app type=app_data_file levelFrom=all
 user=_app isPrivApp=true domain=priv_app type=privapp_data_file levelFrom=user
-user=_app minTargetSdkVersion=28 domain=untrusted_app type=app_data_file levelFrom=all
+user=_app minTargetSdkVersion=29 domain=untrusted_app type=app_data_file levelFrom=all
+user=_app minTargetSdkVersion=28 domain=untrusted_app_27 type=app_data_file levelFrom=all
 user=_app minTargetSdkVersion=26 domain=untrusted_app_27 type=app_data_file levelFrom=user
 user=_app domain=untrusted_app_25 type=app_data_file levelFrom=user