| commit | 609aa6b83ad8f571b2df452ad124b87a315cc270 | [log] [tgz] |
|---|---|---|
| author | Treehugger Robot <treehugger-gerrit@google.com> | Wed Feb 28 20:30:36 2018 +0000 |
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Wed Feb 28 20:30:36 2018 +0000 |
| tree | f8fcad3c9e14e94ed76dd74cb5ea1d027596d746 | |
| parent | 5b1c3b690de57f55005bb06b895d9f26044e54b1 [diff] | |
| parent | 1242c940ef57b4c38b30000003c3a3dfbb095765 [diff] |
Merge "kernel: exempt from vendor_file restrictions"
diff --git a/public/domain.te b/public/domain.te index eb66b30..fc9c0a9 100644 --- a/public/domain.te +++ b/public/domain.te
@@ -1284,11 +1284,12 @@ coredomain -appdomain -bootanim - -init - -ueventd -crash_dump + -init + -kernel -perfprofd - } vendor_file:file { create_file_perms x_file_perms }; + -ueventd + } vendor_file:file { no_w_file_perms no_x_file_perms open }; ') # Minimize dac_override and dac_read_search.