| commit | ee6152844b9a1e551f9bd5f6c56449ab22be3a17 | [log] [tgz] |
|---|---|---|
| author | Stephen Smalley <sds@tycho.nsa.gov> | Fri Jun 20 14:03:20 2014 -0400 |
| committer | Stephen Smalley <sds@tycho.nsa.gov> | Fri Jun 20 14:03:20 2014 -0400 |
| tree | 07b02acdfd7404cbcdec2dc6f7c52d7a49e9befa | |
| parent | 631a5a8e485ee030f97a6e2d42aefbf18e92c4d8 [diff] |
Remove sdcard_type access from unconfineddomain. Require sdcard_type access to be explicitly allowed to each domain. This is to both protect services from being killed by unsafe ejection and to protect SDcard data from access by rogue daemons. Change-Id: If3bdd50fd2be50bd98d755b2f252e0ae455b82c4 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>