Skip to content
Snippets Groups Projects
Commit 7745770b authored by Jeff Vander Stoep's avatar Jeff Vander Stoep
Browse files

Use non-expanded types in prop neverallows

Using hal_foo attributes in neverallow rules does not work because
they are auto-expanded to types. Use hal_foo_server types instead.

Fixes the following error:
unit.framework.AssertionFailedError: The following errors were
encountered when validating the SELinuxneverallow rule: neverallow
{ domain -coredomain -bluetooth -hal_bluetooth } { bluetooth_prop }:
property_service set; Warning! Type or attribute hal_bluetooth used
in neverallow undefined in policy being checked.

Test: CtsSecurityHostTestCases
Bug: 80153368
Change-Id: I2baf9f66d2ff110a4f181423790a1160a6e138da
parent e5cc744d
No related branches found
No related tags found
No related merge requests found
...@@ -186,7 +186,7 @@ compatible_property_only(` ...@@ -186,7 +186,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
} { } {
bluetooth_prop bluetooth_prop
}:property_service set; }:property_service set;
...@@ -195,7 +195,7 @@ compatible_property_only(` ...@@ -195,7 +195,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
-vendor_init -vendor_init
} { } {
exported_bluetooth_prop exported_bluetooth_prop
...@@ -204,7 +204,7 @@ compatible_property_only(` ...@@ -204,7 +204,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
} { } {
wifi_prop wifi_prop
...@@ -213,7 +213,7 @@ compatible_property_only(` ...@@ -213,7 +213,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
-vendor_init -vendor_init
} { } {
...@@ -265,7 +265,7 @@ compatible_property_only(` ...@@ -265,7 +265,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
} { } {
bluetooth_prop bluetooth_prop
}:file no_rw_file_perms; }:file no_rw_file_perms;
...@@ -273,7 +273,7 @@ compatible_property_only(` ...@@ -273,7 +273,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
} { } {
wifi_prop wifi_prop
......
...@@ -186,7 +186,7 @@ compatible_property_only(` ...@@ -186,7 +186,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
} { } {
bluetooth_prop bluetooth_prop
}:property_service set; }:property_service set;
...@@ -195,7 +195,7 @@ compatible_property_only(` ...@@ -195,7 +195,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
-vendor_init -vendor_init
} { } {
exported_bluetooth_prop exported_bluetooth_prop
...@@ -204,7 +204,7 @@ compatible_property_only(` ...@@ -204,7 +204,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
} { } {
wifi_prop wifi_prop
...@@ -213,7 +213,7 @@ compatible_property_only(` ...@@ -213,7 +213,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
-vendor_init -vendor_init
} { } {
...@@ -265,7 +265,7 @@ compatible_property_only(` ...@@ -265,7 +265,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
} { } {
bluetooth_prop bluetooth_prop
}:file no_rw_file_perms; }:file no_rw_file_perms;
...@@ -273,7 +273,7 @@ compatible_property_only(` ...@@ -273,7 +273,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
} { } {
wifi_prop wifi_prop
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment