commit | 0c1848b170f1cce87351dfdda6ca404d86a45b56 | [log] [tgz] |
---|---|---|
author | Risan <risan@google.com> | Tue Oct 30 17:29:22 2018 +0000 |
committer | Risan <risan@google.com> | Tue Nov 13 22:45:51 2018 +0000 |
tree | 8a93a124b5ec6e516bccb059fb4e51a52ccda77f | |
parent | ced1751e45146696237b7664d7b7a8ef11f84749 [diff] |
SELinux changes for AppFuse We are moving AppFuse mount from system_server's mount namespace to vold. Hence, we could reduce the SELinux permissions given to system_server, in the expense of adding allow rules to vold and letting appdomain have access to vold's fd. Bug: 110379912 Test: testOpenProxyFileDescriptor passes (after vold and system_server code changes) Change-Id: I827a108bd118090542354360a8c90b295e6a0fef