b30e888b5c
Bug: 203462310 Test: Ensure that associated BPFs can be loaded Change-Id: I317a890abb518cf4ac47cd089e882315434342ce
14 lines
345 B
Text
14 lines
345 B
Text
# platform should have ownership of network attachpoints for BPF
|
|
neverallow {
|
|
bpfdomain
|
|
-bpfloader
|
|
-netd
|
|
-netutils_wrapper
|
|
-network_stack
|
|
-system_server
|
|
} self:global_capability_class_set { net_admin net_raw };
|
|
|
|
# any domain which uses bpf is a bpfdomain
|
|
neverallow { domain -bpfdomain } *:bpf *;
|
|
|
|
allow bpfdomain fs_bpf:dir search;
|