projects / GitHub / LineageOS / android_device_samsung_slsi_sepolicy.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 33ac1f9)
common: Do not allow to write to read only fs types
authorAndreas Schneider <asn@cryptomilk.org>
Wed, 1 Apr 2020 11:22:32 +0000 (13:22 +0200)
committerAndreas Schneider <asn@cryptomilk.org>
Thu, 2 Apr 2020 04:57:50 +0000 (06:57 +0200)
Change-Id: I06378f5e137582b8a83569d65d5b1869011dd821

common/public/domain.te [new file with mode: 0644] patch | blob

diff --git a/common/public/domain.te b/common/public/domain.te
new file mode 100644 (file)
index 0000000..fb15fe7
--- /dev/null
+++ b/common/public/domain.te
@@ -0,0 +1,4 @@
+# domain.te
+
+# Make sure that labels are used correctly
+neverallow { domain -vendor_init -ueventd } r_fs_type:file write;