| commit | 67ed4328eb4835f4404151ee4bbb93d0f4500354 | [log] [tgz] |
|---|---|---|
| author | Risan <risan@google.com> | Thu Oct 25 16:18:44 2018 -0600 |
| committer | Risan <risan@google.com> | Fri Oct 26 19:45:50 2018 +0000 |
| tree | 7c247504c069a747665c4a268fd08c1b27f547fe | |
| parent | 3eae9de2e8658a03f89db4cff747d5a67a2bf8b7 [diff] |
SELinux changes for AppFuse We are moving AppFuse mount from system_server's mount namespace to vold. Hence, we could reduce the SELinux permissions given to system_server, in the expense of adding allow rules to vold and letting appdomain have access to vold's fd. Bug: 110379912 Test: testOpenProxyFileDescriptor passes (after vold and system_server code changes) Change-Id: I4731a8ec846c5cb84ec4b680d51938494e8ddd75