Google Git
Sign in
android / platform / external / sepolicy / 0792d8a0f22ed444d2dc49e5bffa3c0e436c6ac5
commit0792d8a0f22ed444d2dc49e5bffa3c0e436c6ac5[log] [tgz]
authorNick Kralevich <nnk@google.com>Sun Mar 20 20:29:09 2016 -0700
committerNick Kralevich <nnk@google.com>Sun Mar 20 20:29:09 2016 -0700
tree7d2dc0c02b939c007681c91a5f9accd5f02ec6d7
parent610f461ecf79865548a5a30e85d07d8cee87c14d [diff]
system_server.te: expand app_data_file neverallow rule

Block other operations which involve non-file descriptor
operations.

Change-Id: I5d813781c201a732aa1ee6ff6fd3d82f2af32ec7
1 file changed
tree: 7d2dc0c02b939c007681c91a5f9accd5f02ec6d7
  1. tools/
  2. access_vectors
  3. adbd.te
  4. Android.mk
  5. app.te
  6. atrace.te
  7. attributes
  8. binderservicedomain.te
  9. blkid.te
  10. blkid_untrusted.te
  11. bluetooth.te
  12. bluetoothdomain.te
  13. bootanim.te
  14. bootstat.te
  15. clatd.te
  16. CleanSpec.mk
  17. debuggerd.te
  18. device.te
  19. dex2oat.te
  20. dhcp.te
  21. dnsmasq.te
  22. domain.te
  23. domain_deprecated.te
  24. drmserver.te
  25. dumpstate.te
  26. file.te
  27. file_contexts
  28. file_contexts_asan
  29. fingerprintd.te
  30. fs_use
  31. fsck.te
  32. fsck_untrusted.te
  33. gatekeeperd.te
  34. genfs_contexts
  35. global_macros
  36. gpsd.te
  37. hci_attach.te
  38. healthd.te
  39. hostapd.te
  40. idmap.te
  41. init.te
  42. initial_sid_contexts
  43. initial_sids
  44. inputflinger.te
  45. install_recovery.te
  46. installd.te
  47. ioctl_macros
  48. isolated_app.te
  49. kernel.te
  50. keys.conf
  51. keystore.te
  52. lmkd.te
  53. logd.te
  54. mac_permissions.xml
  55. mdnsd.te
  56. mediaserver.te
  57. mls
  58. mls_macros
  59. MODULE_LICENSE_PUBLIC_DOMAIN
  60. mtp.te
  61. net.te
  62. netd.te
  63. neverallow_macros
  64. nfc.te
  65. NOTICE
  66. perfprofd.te
  67. platform_app.te
  68. policy_capabilities
  69. port_contexts
  70. postinstall.te
  71. ppp.te
  72. priv_app.te
  73. property.te
  74. property_contexts
  75. racoon.te
  76. radio.te
  77. README
  78. recovery.te
  79. rild.te
  80. roles
  81. runas.te
  82. sdcardd.te
  83. seapp_contexts
  84. security_classes
  85. service.te
  86. service_contexts
  87. servicemanager.te
  88. sgdisk.te
  89. shared_relro.te
  90. shell.te
  91. slideshow.te
  92. su.te
  93. surfaceflinger.te
  94. system_app.te
  95. system_server.te
  96. te_macros
  97. tee.te
  98. toolbox.te
  99. tzdatacheck.te
  100. ueventd.te
  101. uncrypt.te
  102. untrusted_app.te
  103. update_engine.te
  104. update_verifier.te
  105. users
  106. vdc.te
  107. vold.te
  108. watchdogd.te
  109. wpa.te
  110. zygote.te