Fix SEPolicy not work

2020-01-04 21:05:26 +08:00 · 2020-01-04 21:05:26 +08:00 · 611361540d
parent c49668d970
commit 611361540d
1 changed files with 0 additions and 7 deletions
--- a/edxp-core/template_override/sepolicy.rule
+++ b/edxp-core/template_override/sepolicy.rule
@ -1,13 +1,6 @@
-# necessary for using mmap in system_server process
 allow system_server system_server process {execmem}
 allow system_server system_server memprotect {mmap_zero}
-
-# for built-in apps // TODO maybe narrow down the target classes
 allow coredomain coredomain process {execmem}
-
-# read configs set in our app
 allow coredomain app_data_file * *
 attradd {system_app platform_app} mlstrustedsubject
-
-# read module apk file in zygote
 allow zygote apk_data_file * *