tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Exempt tetheroffload hal from network socket restrictions" into oc-dev

Browse source 
am: 6351c374c2

Change-Id: I6e661aa37702c36e9003dcf41dbed4b754122c87
This commit is contained in:
Jeff Vander Stoep 2017-06-21 23:32:08 +00:00 committed by android-build-merger
commit d9301ac6fa
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
public/hal_neverallows.te
View file

@ -8,10 +8,11 @@ neverallow {
-rild
} self:capability { net_admin net_raw };
# Unless a HAL's job is to manage network hardware, it should not be
# using network sockets.
# Unless a HAL's job is to communicate over the network, or control network
# hardware, it should not be using network sockets.
neverallow {
halserverdomain
-hal_tetheroffload_server
-hal_wifi_server
-hal_wifi_supplicant_server
-rild