diff options
| author | android-build-team Robot <android-build-team-robot@google.com> | 2020-10-01 01:00:57 +0000 |
|---|---|---|
| committer | android-build-team Robot <android-build-team-robot@google.com> | 2020-10-01 01:00:57 +0000 |
| commit | 60e5eae0dc61eb1c05f3a7b0e799b1ddc007b281 (patch) | |
| tree | f1f35457ef5817421f9978c82fac47e823e434df | |
| parent | b51dee7b92caf640301da9ce913bac682dc3b55c (diff) | |
| parent | 57dfa5c1803ee8cffb36e22ae72aa8d25c1095ee (diff) | |
| download | wembley-sepolicy-60e5eae0dc61eb1c05f3a7b0e799b1ddc007b281.tar.gz | |
Snap for 6875836 from 57dfa5c1803ee8cffb36e22ae72aa8d25c1095ee to sc-release
Change-Id: I9b186071d126c62fe5b140fb4b049354788aa0d8
| -rw-r--r-- | neverallows/plat_public/neverallows.te | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/neverallows/plat_public/neverallows.te b/neverallows/plat_public/neverallows.te index 218569c..3a5426a 100644 --- a/neverallows/plat_public/neverallows.te +++ b/neverallows/plat_public/neverallows.te @@ -291,7 +291,9 @@ full_treble_only(` neverallow vold system_data_file:dir ~{ create rw_dir_perms mounton setattr rmdir }; - neverallow vold_prepare_subdirs system_data_file:dir ~{ open read write add_name remove_name rmdir relabelfrom search getattr }; + +# GOOGLE commented out. Blocks desired policy change in AOSP. See b/141677108. +# neverallow vold_prepare_subdirs system_data_file:dir ~{ open read write add_name remove_name rmdir relabelfrom search getattr }; with_asan(` neverallow asan_extract system_data_file:dir ~{ create_dir_perms relabelfrom }; |