public/mediaextractor.te · 6eef5589d2cc3562516f724788661f54e8d8d85a · Werner Sembach / AndroidSystemSEPolicy

Something went wrong on our end

7 years ago

mediaextractor: ensure no direct open()s · d329e7eb

Nick Kralevich authored 7 years ago

Mediaextractor should only be operating on data passed directly to it.
It shouldn't be attempting to open /data files on it's own.

Add a neverallow statement (compile time assertion + CTS test) to ensure
this is the case.

Bug: 67454004
Test: policy compiles. No runtime impact.
Change-Id: Ie94d4cb9aece7e72fbd13321f339dcf9d44d5d77

d329e7eb

History

mediaextractor: ensure no direct open()s

Nick Kralevich authored 7 years ago

Mediaextractor should only be operating on data passed directly to it.
It shouldn't be attempting to open /data files on it's own.

Add a neverallow statement (compile time assertion + CTS test) to ensure
this is the case.

Bug: 67454004
Test: policy compiles. No runtime impact.
Change-Id: Ie94d4cb9aece7e72fbd13321f339dcf9d44d5d77

mediaextractor.te 2.30 KiB