| commit | 5d5284ad93b42d012f4a5431e77d41125edb81da | [log] [tgz] |
|---|---|---|
| author | Treehugger Robot <treehugger-gerrit@google.com> | Fri Jan 19 04:56:36 2018 +0000 |
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Fri Jan 19 04:56:36 2018 +0000 |
| tree | 6206f8d93227f9a0603baf2d0a96bbc5d6696323 | |
| parent | 5971d678e635c4e85b0715131abef4ee0005b77a [diff] | |
| parent | 09fddac1d7e8b24ed5e3d17a66cc7d76016486f9 [diff] |
Merge "Disallow sysfs_leds to coredomains."
diff --git a/private/coredomain.te b/private/coredomain.te index 244c83c..c8f2b1d 100644 --- a/private/coredomain.te +++ b/private/coredomain.te
@@ -1,2 +1,17 @@ get_prop(coredomain, pm_prop) get_prop(coredomain, exported_pm_prop) + +full_treble_only(` +neverallow { + coredomain + -init + -vendor_init + + # generic access to sysfs_type + -ueventd + -vold + -priv_app + -storaged + -system_app +} sysfs_leds:file *; +')