Merge "Update neverallow rules for init_first_stage"

This commit is contained in:
Nikita Ioffe
2023-06-22 10:11:31 +00:00
committed by Gerrit Code Review

View File

@@ -239,7 +239,9 @@ func createUncompressDexRules() []Rule {
func createInitFirstStageRules() []Rule { func createInitFirstStageRules() []Rule {
return []Rule{ return []Rule{
NeverAllow(). NeverAllow().
Without("name", "init_first_stage_defaults").
Without("name", "init_first_stage"). Without("name", "init_first_stage").
Without("name", "init_first_stage.microdroid").
With("install_in_root", "true"). With("install_in_root", "true").
Because("install_in_root is only for init_first_stage."), Because("install_in_root is only for init_first_stage."),
} }