commit f0221d47f585e899986823b921a19849da6e227a
author Geremy Condra <gcondra@google.com> Thu Mar 21 14:11:16 2013 -0700
committer Android Git Automerger <android-git-automerger@android.com> Thu Mar 21 14:11:16 2013 -0700
tree 0f0a35c610619dcf759797bcab3d2bdfd553e6b4
parent f1f4af695e657c8146463d42ce64d2def54769bc
parent cf141426d45067f4a9709d3cf79eef3609d63ab1

am cf141426: Merge "Strengthen setenforce and setbool assertions"

* commit 'cf141426d45067f4a9709d3cf79eef3609d63ab1':
  Strengthen setenforce and setbool assertions

assert.te

diff --git a/assert.te b/assert.te
index 1f12c5e..85cb48b 100644
--- a/assert.te
+++ b/assert.te
@@ -16,7 +16,7 @@
 
 # Setting SELinux enforcing status or booleans.
 # Conditionally allowed to system_app for SEAndroidManager.
-neverallow { appdomain -system_app } kernel:security { setenforce setbool };
+neverallow { domain -unconfineddomain -system -system_app } kernel:security { setenforce setbool };
 
 # Load security policy.
 neverallow appdomain kernel:security load_policy;