tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Exempt tetheroffload hal from network socket restrictions" into oc-dev am: 6351c374c2

Browse source 
am: d9301ac6fa

Change-Id: I4b272a59a7e48e1f0f15ddd1acb7e8f6b836ca40
This commit is contained in:
Jeff Vander Stoep 2017-06-21 23:34:41 +00:00 committed by android-build-merger
commit aae5c4c8c5
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
public/hal_neverallows.te
View file

@ -8,10 +8,11 @@ neverallow {
-rild
} self:capability { net_admin net_raw };
# Unless a HAL's job is to manage network hardware, it should not be
# using network sockets.
# Unless a HAL's job is to communicate over the network, or control network
# hardware, it should not be using network sockets.
neverallow {
halserverdomain
-hal_tetheroffload_server
-hal_wifi_server
-hal_wifi_supplicant_server
-rild