diff options
| author | Jeffrey Vander Stoep <jeffv@google.com> | 2016-06-21 16:49:10 +0000 |
|---|---|---|
| committer | Android (Google) Code Review <android-gerrit@google.com> | 2016-06-21 16:49:10 +0000 |
| commit | ca503dc719f6fd944b71871ceacda39c8a65755a (patch) | |
| tree | 8a99e5e656abd78f464bce133d3a6bbb1a6904bd | |
| parent | ad725eac666ab351dc7144eea05d7950c7db2745 (diff) | |
| parent | 2e475eb0ab9db1f5c9dd7d76fa0b729cb7c494f3 (diff) | |
| download | bullhead-ca503dc719f6fd944b71871ceacda39c8a65755a.tar.gz | |
Merge "Remove access to /dev/diag for apps on debug builds" into nyc-dev
| -rw-r--r-- | sepolicy/domain.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sepolicy/domain.te b/sepolicy/domain.te index ef82827..ee24d7f 100644 --- a/sepolicy/domain.te +++ b/sepolicy/domain.te @@ -1,5 +1,5 @@ userdebug_or_eng(` - allow domain diag_device:chr_file rw_file_perms; + allow { domain -appdomain } diag_device:chr_file rw_file_perms; ') r_dir_file(domain, sysfs_socinfo); |