commit | d331e00bd8101b5ab63e08822cdad7a223c2a5dd | [log] [tgz] |
---|---|---|
author | Stephen Smalley <sds@tycho.nsa.gov> | Wed Mar 05 13:07:01 2014 -0500 |
committer | Stephen Smalley <sds@tycho.nsa.gov> | Wed Mar 05 13:18:16 2014 -0500 |
tree | 3f36a89a3a246c08e6982d1440fe8b6c22df5b15 | |
parent | 3dad7b611a448fa43a678ff760c23a00f387947e [diff] |
Do not allow system_server to access SDcard files. As per: https://android-review.googlesource.com/#/c/84130/3/system_server.te@240 it is unsafe to allow such access. Add a neverallow rule to prohibit any rules on sdcard_type in the future. Change-Id: Ife714b65b07144eb6228a048a55ba82181595213 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>