DO NOT MERGE: Remove duplicate neverallow for hal_audio_server am: 8df611bb46

Change-Id: Ic08d6f5a8d5934c06c1b2c88bbe93b46a6cf0607
This commit is contained in:
Yiming Jing 2020-05-19 00:52:53 +00:00 committed by Automerger Merge Worker
commit 78be1e7839
2 changed files with 0 additions and 8 deletions

View file

@ -30,10 +30,6 @@ vndbinder_use(hal_audio)
# Should never execute any executable without a domain transition
neverallow hal_audio_server { file_type fs_type }:file execute_no_trans;
# Should never need network access.
# Disallow network sockets.
neverallow hal_audio_server domain:{ tcp_socket udp_socket rawip_socket } *;
# Only audio HAL may directly access the audio hardware
neverallow { halserverdomain -hal_audio_server -hal_omx_server } audio_device:chr_file *;

View file

@ -30,10 +30,6 @@ vndbinder_use(hal_audio)
# Should never execute any executable without a domain transition
neverallow hal_audio_server { file_type fs_type }:file execute_no_trans;
# Should never need network access.
# Disallow network sockets.
neverallow hal_audio_server domain:{ tcp_socket udp_socket rawip_socket } *;
# Only audio HAL may directly access the audio hardware
neverallow { halserverdomain -hal_audio_server -hal_omx_server } audio_device:chr_file *;