sepolicy: whitelist recovery from node creation neverallow

Change-Id: If91584e58f3709c0b18eaf9ee12a0c057716f9f3
AOSP-12 · Oct 20, 2021 · f6ce1e2 · f6ce1e2
1 parent d81f6e3
commit f6ce1e2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/prebuilts/api/30.0/public/domain.te b/prebuilts/api/30.0/public/domain.te
@@ -353,6 +353,7 @@ neverallow {
   -init
   -ueventd
   -vold
+  -recovery
 } self:global_capability_class_set mknod;
 
 # No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).

diff --git a/public/domain.te b/public/domain.te
@@ -380,6 +380,7 @@ neverallow {
   -init
   -ueventd
   -vold
+  -recovery
 } self:global_capability_class_set mknod;
 
 # No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
-Original file line number
+Diff line change
@@ Expand Up / @@ -353,6 +353,7 @@ neverallow { @@
       -init
       -ueventd
       -vold
+      -recovery
     } self:global_capability_class_set mknod;
     # No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
@@ Expand Down @@