| commit | 35a145143076ceee50f387025d8cb3c62e62569e | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Fri Feb 05 14:48:03 2016 -0800 |
| committer | Nick Kralevich <nnk@google.com> | Fri Feb 05 14:54:04 2016 -0800 |
| tree | 0186c87954be0cefa5941faeea370903fec5de39 | |
| parent | d1435604455e5e274c88f6ee0308c7881cddaf20 [diff] |
Replace "neverallow domain" by "neverallow *" Modify many "neverallow domain" rules to be "neverallow *" rules instead. This will catch more SELinux policy bugs where a label is assigned an irrelevant rule, as well as catch situations where a domain attribute is not assigned to a process. Change-Id: I5b83a2504c13b384f9dff616a70ca733b648ccdf