Blame · shell.te · 712ca0a4d5c3ff77179da2544aafd6eb8e5a70c2 · halo / external_sepolicy · GitLab

Find file Normal view History Permalink

shell.te 325 Bytes

Newer Older

SELinux policy that separates "init_shell" from "shell". Alex Klyubin committed 12 years ago	1	`# Domain for shell processes spawned by ADB`
Confine shell domain in -user builds only. Stephen Smalley committed 11 years ago	2	`type shell, domain, shelldomain, mlstrustedsubject;`
Make sure exec_type is assigned to all entrypoint types. Stephen Smalley committed 11 years ago	3	`type shell_exec, exec_type, file_type;`
SE Android policy. Stephen Smalley committed 13 years ago	4 5	`# Run app_process.`
Confine shell domain in -user builds only. Stephen Smalley committed 11 years ago	6	`# XXX Transition into its own domain?`
SE Android policy. Stephen Smalley committed 13 years ago	7	`app_domain(shell)`
Restrict the ability to set SELinux enforcing mode to init. Stephen Smalley committed 11 years ago	8
Confine shell domain in -user builds only. Stephen Smalley committed 11 years ago	9	`# userdebug/eng shell is also permissive to permit setenforce.`
Restrict the ability to set SELinux enforcing mode to init. Stephen Smalley committed 11 years ago	10	`permissive shell;`
Support run-as and ndk-gdb functionality. Stephen Smalley committed 11 years ago	11
Confine shell domain in -user builds only. Stephen Smalley committed 11 years ago	12	`# inherits from shelldomain.te`