commit f7dcc537986a04048a361a8f6cad221f130f9988
author Jiakai Zhang <jiakaiz@google.com> Thu Jul 04 15:59:49 2024 +0100
committer Jiakai Zhang <jiakaiz@google.com> Wed Jul 10 17:48:17 2024 +0100
tree 6a77b56b144cb6adef394770283196dbba7a0daf
parent d2c9226244cf1ac5b9717f5744e9864c754f26b4

Add neverallow rules to ensure successful kill by artd.

Bug: 345723405
Test: m
Change-Id: I81c583b0144f3a1a0c122cae64e302878da34809

private/odrefresh.te

diff --git a/private/odrefresh.te b/private/odrefresh.te
index 899b0d9..625af63 100644
--- a/private/odrefresh.te
+++ b/private/odrefresh.te
@@ -1,5 +1,5 @@
 # odrefresh
-type odrefresh, domain, coredomain;
+type odrefresh, domain, coredomain, artd_subprocess_type;
 type odrefresh_exec, system_file_type, exec_type, file_type;
 
 # Allow odrefresh to create files and directories for on device signing.