diff options
| author | Nick Kralevich <nnk@google.com> | 2017-10-09 23:45:24 +0000 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2017-10-09 23:45:24 +0000 |
| commit | 856272c6890a909cf043c3070f82f54e224b7f8f (patch) | |
| tree | ec05f02dc53fc266803ea8894d36661796bd3afa | |
| parent | 8d206bd91deef8035d57a91fedd1cd567df98ed0 (diff) | |
| parent | b67d85fdf6ca0e1318aae2cf80479a8977231a1a (diff) | |
| download | bullhead-856272c6890a909cf043c3070f82f54e224b7f8f.tar.gz | |
Restrict isolated_app's /sys access
am: b67d85fdf6
Change-Id: I295d258de3e61869e0ebf338c7e21fbe22f81c44
| -rw-r--r-- | sepolicy/domain.te | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sepolicy/domain.te b/sepolicy/domain.te index ee24d7f..24869b9 100644 --- a/sepolicy/domain.te +++ b/sepolicy/domain.te @@ -2,7 +2,7 @@ userdebug_or_eng(` allow { domain -appdomain } diag_device:chr_file rw_file_perms; ') -r_dir_file(domain, sysfs_socinfo); -r_dir_file(domain, sysfs_thermal); -r_dir_file(domain, sysfs_power_management); +r_dir_file({ domain -isolated_app }, sysfs_socinfo); +r_dir_file({ domain -isolated_app }, sysfs_thermal); +r_dir_file({ domain -isolated_app }, sysfs_power_management); r_dir_file(domain, sysfs_devices_system_cpu); |