Google Git
Sign in
android / platform / system / sepolicy / 50ba631
commit50ba6318419fc56366377c042f56cec5a2414c51[log] [tgz]
authorNick Kralevich <nnk@google.com>Thu Apr 21 17:08:41 2016 -0700
committerNick Kralevich <nnk@google.com>Thu Apr 21 17:08:41 2016 -0700
tree8d6e068bc6fb7fb1d28b8dd99e2f95a6c2edba05
parent4432c6355af55118e94f9260962089f345cba21c [diff]
Add no_x_file_perm to property related files.

It doesn't ever make sense to attempt to load executable code
from these files. Add a neverallow rule (compile time assertion and
CTS test).

Bug: 27882507
Change-Id: Iaa83e3ac543b2221e1178c563e18298305de6da2
1 file changed
tree: 8d6e068bc6fb7fb1d28b8dd99e2f95a6c2edba05
  1. tools/
  2. access_vectors
  3. adbd.te
  4. Android.mk
  5. app.te
  6. atrace.te
  7. attributes
  8. binderservicedomain.te
  9. blkid.te
  10. blkid_untrusted.te
  11. bluetooth.te
  12. bluetoothdomain.te
  13. bootanim.te
  14. bootstat.te
  15. clatd.te
  16. CleanSpec.mk
  17. debuggerd.te
  18. device.te
  19. dex2oat.te
  20. dhcp.te
  21. dnsmasq.te
  22. domain.te
  23. domain_deprecated.te
  24. drmserver.te
  25. dumpstate.te
  26. file.te
  27. file_contexts
  28. file_contexts_asan
  29. fingerprintd.te
  30. fs_use
  31. fsck.te
  32. fsck_untrusted.te
  33. gatekeeperd.te
  34. genfs_contexts
  35. global_macros
  36. gpsd.te
  37. hci_attach.te
  38. healthd.te
  39. hostapd.te
  40. idmap.te
  41. init.te
  42. initial_sid_contexts
  43. initial_sids
  44. inputflinger.te
  45. install_recovery.te
  46. installd.te
  47. ioctl_macros
  48. isolated_app.te
  49. kernel.te
  50. keys.conf
  51. keystore.te
  52. lmkd.te
  53. logd.te
  54. mac_permissions.xml
  55. mdnsd.te
  56. mediaserver.te
  57. mls
  58. mls_macros
  59. MODULE_LICENSE_PUBLIC_DOMAIN
  60. mtp.te
  61. net.te
  62. netd.te
  63. neverallow_macros
  64. nfc.te
  65. NOTICE
  66. perfprofd.te
  67. platform_app.te
  68. policy_capabilities
  69. port_contexts
  70. postinstall.te
  71. ppp.te
  72. priv_app.te
  73. property.te
  74. property_contexts
  75. racoon.te
  76. radio.te
  77. README
  78. recovery.te
  79. recovery_persist.te
  80. recovery_refresh.te
  81. rild.te
  82. roles
  83. runas.te
  84. sdcardd.te
  85. seapp_contexts
  86. security_classes
  87. service.te
  88. service_contexts
  89. servicemanager.te
  90. sgdisk.te
  91. shared_relro.te
  92. shell.te
  93. slideshow.te
  94. su.te
  95. surfaceflinger.te
  96. system_app.te
  97. system_server.te
  98. te_macros
  99. tee.te
  100. toolbox.te
  101. tzdatacheck.te
  102. ueventd.te
  103. uncrypt.te
  104. untrusted_app.te
  105. update_engine.te
  106. update_verifier.te
  107. users
  108. vdc.te
  109. vold.te
  110. watchdogd.te
  111. wpa.te
  112. zygote.te