diff options
| author | Adnan Begovic <adnan@cyngn.com> | 2015-10-15 13:06:44 -0700 |
|---|---|---|
| committer | Adnan Begovic <adnan@cyngn.com> | 2015-10-16 13:11:28 -0700 |
| commit | 442c3ebd4c05bed217e756586ac9fcb4c6283d40 (patch) | |
| tree | e86ab0f1195ed9f86834372ae442d605c0cef94e /recovery.te | |
| parent | edb21bcd85d86435b58f8f679cb988182b6bbc29 (diff) | |
| download | android_external_sepolicy-442c3ebd4c05bed217e756586ac9fcb4c6283d40.tar.gz android_external_sepolicy-442c3ebd4c05bed217e756586ac9fcb4c6283d40.tar.bz2 android_external_sepolicy-442c3ebd4c05bed217e756586ac9fcb4c6283d40.zip | |
sepolicy: Fixup neverallows for non-shipping builds..
Change-Id: Id377a5821df76f5bc92360d3891989490da9e42e
Diffstat (limited to 'recovery.te')
| -rw-r--r-- | recovery.te | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/recovery.te b/recovery.te index 8d6fd62..646e42f 100644 --- a/recovery.te +++ b/recovery.te @@ -114,5 +114,11 @@ recovery_only(` # domains, including recovery. # # TODO: tighten this up further. -neverallow recovery data_file_type:file { no_w_file_perms no_x_file_perms }; -neverallow recovery data_file_type:dir no_w_dir_perms; +ifelse(shipping_build, `true', + `neverallow recovery data_file_type:file { no_w_file_perms no_x_file_perms };' +, +) +ifelse(shipping_build, `true', + `neverallow recovery data_file_type:dir no_w_dir_perms;' +, +) |