Merge "Add neverallow rules to restrict reading radio_prop"

am: 310e8a559b Change-Id: I771a484638cf5ba193deef85ba58ba2392117f4e
2018-02-02 04:02:48 +00:00 · 2018-02-02 04:02:48 +00:00 · c292460c3c
commit c292460c3c
parent 1e9a1ece9e 310e8a559b
1 changed files with 10 additions and 1 deletions
--- a/public/property.te
+++ b/public/property.te
@ -183,10 +183,19 @@ compatible_property_only(`
    exported3_default_prop
    exported3_system_prop
    -debug_prop
-    -fingerprint_prop
    -logd_prop
    -nfc_prop
    -powerctl_prop
    -radio_prop
  }:file no_rw_file_perms;
+
+  neverallow {
+    domain
+    -coredomain
+    -appdomain
+    -rild
+    -vendor_init
+  } {
+    radio_prop
+  }:file no_rw_file_perms;
 ')