Commits

Stephen Smalley committed 23ba799 Merge

Merge branch 'seandroid' into intent_mac

Comments (0)

Files changed (2)

 neverallow appdomain fs_type:filesystem ~getattr;
 
 # Ability to set system properties.
-neverallow { appdomain -system_app -radio -shell } property_type:property_service set;
+neverallow { appdomain -system_app -radio -shell -bluetooth } property_type:property_service set;
 init_daemon_domain(tee)
 allow tee self:capability { dac_override };
 allow tee tee_device:chr_file rw_file_perms;
-allow tee tee_data_file:dir { getattr write add_name };
+allow tee tee_data_file:dir rw_dir_perms;
 allow tee tee_data_file:file create_file_perms;
 allow tee self:netlink_socket { create bind read };