84cd7087d5c0b9d32d016d115c3784d98ed5fe48 - LeafOS-Project/android_system_sepolicy

commit	84cd7087d5c0b9d32d016d115c3784d98ed5fe48	[log] [tgz]
author	Dorin Drimus <dorindrimus@google.com>	Mon Jan 25 13:57:56 2021 +0100
committer	Dorin Drimus <dorindrimus@google.com>	Tue Jan 26 15:59:37 2021 +0100
tree	fb5245eae6dc75d4fd97bdd166113c7d5d665358
parent	29c54ec937db440fbb40f21d101f0a5fc6bbc33c [diff]

Add vendor_public_framework_file type to SEPolicy

And allow access from system apps to vendor libs public only for system.
These files should be marked individually by OEMs. Maintainance
ownership for these libraries is also OEM's responsability.
Similar with vendor_public_libs_file type, this allows for an explicit
labeling of OEM system apps that can access libs from vendor.

Bug: 172526961
Test: build-only change, policy builds
Change-Id: I7d4c8232e0b52e73f373d3347170c87ab2dcce52

private/compat/29.0/29.0.cil[diff]
private/compat/30.0/30.0.cil[diff]
private/domain.te[diff]
public/app.te[diff]
public/domain.te[diff]
public/file.te[diff]

6 files changed