| commit | 369cf8cde5f69e6d6b752e250edfba80289b9c83 | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Fri Mar 25 12:22:32 2016 -0700 |
| committer | Nick Kralevich <nnk@google.com> | Fri Mar 25 12:22:32 2016 -0700 |
| tree | 0f91bd625cbaa65531eeb88869dbb7e1d144c416 | |
| parent | f2d07904f7754a066c7e15a072cf57126ff348d3 [diff] |
neverallow /data/anr access for isolated/untrusted apps Add a neverallow rule (compile time assertion + CTS test) that isolated_apps and untrusted_apps can't do anything else but append to /data/anr/traces.txt. In particular, assert that they can't read from the file, or overwrite other data which may already be in the file. Bug: 18340553 Bug: 27853304 Change-Id: I249fe2a46401b660efaa3f1102924a448ed750d5