am 35a4ed80: Add wpa neverallow rule

* commit '35a4ed80': Add wpa neverallow rule

am 35a4ed80: Add wpa neverallow rule
57df7115 · Nick Kralevich · Android Git Automerger · 98ada9a6 · 35a4ed80 · 57df7115
Commit 57df7115 authored 10 years ago by Nick Kralevich Committed by Android Git Automerger 10 years ago
--- a/wpa.te
+++ b/wpa.te
@@ -37,3 +37,11 @@ allow wpa keystore:keystore_key {
 userdebug_or_eng(`
  unix_socket_send(wpa, wpa, su)
 ')
+
+###
+### neverallow rules
+###
+
+# wpa_supplicant should not trust any data from sdcards
+neverallow wpa sdcard_type:dir ~getattr;
+neverallow wpa sdcard_type:file *;