diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2012-11-16 09:17:54 -0500 |
|---|---|---|
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | 2013-03-19 22:48:17 +0000 |
| commit | 9ce99e3908fcd81430bc9612e5d86819939b6db2 (patch) | |
| tree | a06a56484894250c96481814ed645bf4c89b8207 /servicemanager.te | |
| parent | 1f5939a97647bb71414588be8f26114773edceaf (diff) | |
| download | android_external_sepolicy-9ce99e3908fcd81430bc9612e5d86819939b6db2.tar.gz android_external_sepolicy-9ce99e3908fcd81430bc9612e5d86819939b6db2.tar.bz2 android_external_sepolicy-9ce99e3908fcd81430bc9612e5d86819939b6db2.zip | |
Update binder-related policy.
The binder_transfer_binder hook was changed in the kernel, obsoleting
the receive permission and changing the target of the transfer permission.
Update the binder-related policy to match the revised permission checking.
Change-Id: I1ed0dadfde2efa93296e967eb44ca1314cf28586
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'servicemanager.te')
| -rw-r--r-- | servicemanager.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/servicemanager.te b/servicemanager.te index fefbe08..a78a485 100644 --- a/servicemanager.te +++ b/servicemanager.te @@ -11,4 +11,4 @@ init_daemon_domain(servicemanager) # created by other domains. It never passes its own references # or initiates a Binder IPC. allow servicemanager self:binder set_context_mgr; -allow servicemanager domain:binder { receive transfer }; +allow servicemanager domain:binder transfer; |