Merge "Restrict functions for vold" am: 8a441b6a am: dedf970d am: 868f3977

am: a1c8fb73 Change-Id: I411cbffe6d58f6b3a8f5fa120bf73d10c020e41e

Merge "Restrict functions for vold" am: 8a441b6a am: dedf970d am: 868f3977
2031d681 · Peter Enderborg · android-build-merger · bb00b046 · a1c8fb73 · 2031d681
Commit 2031d681 authored 7 years ago by Peter Enderborg Committed by android-build-merger 7 years ago
--- a/public/vold.te
+++ b/public/vold.te
@@ -212,3 +212,5 @@ neverallow vold {

 neverallow vold fsck_exec:file execute_no_trans;
 neverallow { domain -init } vold:process { transition dyntransition };
+neverallow vold *:process ptrace;
+neverallow vold *:rawip_socket *;