diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2014-03-27 11:48:32 -0400 |
|---|---|---|
| committer | Stephen Smalley <sds@tycho.nsa.gov> | 2014-03-28 08:25:22 -0400 |
| commit | 6d8fa69548af532b7d73a21e2d4678f2413c359d (patch) | |
| tree | 5c753edd7aa2985d89a6be215f4d67db3602e8d3 /seapp_contexts | |
| parent | 9fc0d40eff46d1319f282df68376c335c3115c36 (diff) | |
| download | android_external_sepolicy-6d8fa69548af532b7d73a21e2d4678f2413c359d.tar.gz android_external_sepolicy-6d8fa69548af532b7d73a21e2d4678f2413c359d.tar.bz2 android_external_sepolicy-6d8fa69548af532b7d73a21e2d4678f2413c359d.zip | |
Move shell entry up with other platform UID entries.
This is a trivial change to seapp_contexts to force a relabel
of /data/data directories by PMS/installd by yielding a
different hash value for comparison against /data/system/seapp_hash.
This change does not alter any actual app process or data directory
labeling decisions. The seapp_contexts entries are sorted upon
loading by libselinux to match the precedence rules described
in the comment header, so ordering in this file should not matter.
This should not be merged before the code changes with the same Change-Id.
Change-Id: Ie440cba2c96f0907458086348197e1506d31c1b6
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'seapp_contexts')
| -rw-r--r-- | seapp_contexts | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/seapp_contexts b/seapp_contexts index eaa0c16..ff0964a 100644 --- a/seapp_contexts +++ b/seapp_contexts @@ -39,10 +39,10 @@ user=system domain=system_app type=system_data_file user=bluetooth domain=bluetooth type=bluetooth_data_file user=nfc domain=nfc type=nfc_data_file user=radio domain=radio type=radio_data_file +user=shell domain=shell type=shell_data_file user=_app domain=untrusted_app type=app_data_file user=_app seinfo=platform domain=platform_app type=app_data_file user=_app seinfo=shared domain=shared_app type=app_data_file user=_app seinfo=media domain=media_app type=app_data_file user=_app seinfo=release domain=release_app type=app_data_file user=_isolated domain=isolated_app -user=shell domain=shell type=shell_data_file |