Merge "Restrict functions for vold" am: 8a441b6a am: dedf970d

am: 868f3977 Change-Id: Iea60801b3641804bf46f3b6dfffc54957a919d7a

Merge "Restrict functions for vold" am: 8a441b6a am: dedf970d
a1c8fb73 · Peter Enderborg · android-build-merger · d9992f9a · 868f3977 · a1c8fb73
Commit a1c8fb73 authored 7 years ago by Peter Enderborg Committed by android-build-merger 7 years ago
--- a/public/vold.te
+++ b/public/vold.te
@@ -193,3 +193,5 @@ neverallow { domain -vold -init } restorecon_prop:property_service set;

 neverallow vold fsck_exec:file execute_no_trans;
 neverallow { domain -init } vold:process { transition dyntransition };
+neverallow vold *:process ptrace;
+neverallow vold *:rawip_socket *;