Skip to content
Snippets Groups Projects
  • Alex Klyubin's avatar
    6e4508e6
    Restrict access to Bluetooth system properties · 6e4508e6
    Alex Klyubin authored
    This removes access to Bluetooth system properties from arbitrary
    SELinux domains. Access remains granted to init, bluetooth, and
    system_app domains. neverallow rules / CTS enforce that access is not
    granted to Zygote and processes spawned from Zygote expcept for
    system_app and bluetooth.
    
    The reason is that some of these properties may leak persistent
    identifiers not resettable by the user.
    
    Test: Bluetooth pairing and data transfer works
    Bug: 33700679
    Change-Id: Icdcb3927a423c4011a62942340a498cc1b302472
    6e4508e6
    History
    Restrict access to Bluetooth system properties
    Alex Klyubin authored
    This removes access to Bluetooth system properties from arbitrary
    SELinux domains. Access remains granted to init, bluetooth, and
    system_app domains. neverallow rules / CTS enforce that access is not
    granted to Zygote and processes spawned from Zygote expcept for
    system_app and bluetooth.
    
    The reason is that some of these properties may leak persistent
    identifiers not resettable by the user.
    
    Test: Bluetooth pairing and data transfer works
    Bug: 33700679
    Change-Id: Icdcb3927a423c4011a62942340a498cc1b302472
property_contexts 4.71 KiB