diff options
| author | Martijn Coenen <maco@google.com> | 2014-09-25 15:13:41 -0700 |
|---|---|---|
| committer | Martijn Coenen <maco@google.com> | 2014-09-25 15:36:03 -0700 |
| commit | 05383ebfb439bed8436912ed28db550e8842b343 (patch) | |
| tree | 5d1243dc5f6fbe0af443e8bb3ed787d15d430e0c /app.te | |
| parent | 0a20b57f884d0bd9a3dd7821c1e77cec1f13ad4c (diff) | |
| download | android_external_sepolicy-05383ebfb439bed8436912ed28db550e8842b343.tar.gz android_external_sepolicy-05383ebfb439bed8436912ed28db550e8842b343.tar.bz2 android_external_sepolicy-05383ebfb439bed8436912ed28db550e8842b343.zip | |
Allow NFC to read/write nfc. system properties.
Bug: 17298769
Change-Id: I1994ff9f9da9b13249099f6c9bcec88dcdc2bb97
Diffstat (limited to 'app.te')
| -rw-r--r-- | app.te | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -236,7 +236,7 @@ neverallow appdomain socket_device:sock_file write; # Unix domain sockets. neverallow appdomain adbd_socket:sock_file write; neverallow appdomain installd_socket:sock_file write; -neverallow { appdomain -bluetooth -radio -shell -system_app } +neverallow { appdomain -bluetooth -radio -shell -system_app -nfc } property_socket:sock_file write; neverallow { appdomain -radio } rild_socket:sock_file write; neverallow appdomain vold_socket:sock_file write; @@ -338,5 +338,5 @@ neverallow { appdomain -system_app -shell } neverallow appdomain fs_type:filesystem ~getattr; # Ability to set system properties. -neverallow { appdomain -system_app -radio -shell -bluetooth } +neverallow { appdomain -system_app -radio -shell -bluetooth -nfc } property_type:property_service set; |