Skip to content
Snippets Groups Projects
Commit bd743354 authored by android-build-team Robot's avatar android-build-team Robot
Browse files

Snap for 4801384 from b5e493d8 to pi-release

Change-Id: Id6fb5c76d1d804b80a46cd7596f70addfaaeac5f
parents 774378fc b5e493d8
No related branches found
No related tags found
No related merge requests found
......@@ -26,3 +26,5 @@ neverallow { domain -netd -bpfloader } bpfloader_exec:file { execute execute_no_
neverallow bpfloader domain:{ tcp_socket udp_socket rawip_socket } *;
# only system_server, netd and bpfloader can read/write the bpf maps
neverallow { domain -system_server -netd -bpfloader} netd:bpf { map_read map_write };
dontaudit bpfloader self:capability sys_admin;
......@@ -214,7 +214,7 @@ compatible_property_only(`
domain
-coredomain
-bluetooth
-hal_bluetooth
-hal_bluetooth_server
} {
bluetooth_prop
}:property_service set;
......@@ -223,7 +223,7 @@ compatible_property_only(`
domain
-coredomain
-bluetooth
-hal_bluetooth
-hal_bluetooth_server
-vendor_init
} {
exported_bluetooth_prop
......@@ -232,7 +232,7 @@ compatible_property_only(`
neverallow {
domain
-coredomain
-hal_wifi
-hal_wifi_server
-wificond
} {
wifi_prop
......@@ -241,7 +241,7 @@ compatible_property_only(`
neverallow {
domain
-coredomain
-hal_wifi
-hal_wifi_server
-wificond
-vendor_init
} {
......@@ -293,7 +293,7 @@ compatible_property_only(`
domain
-coredomain
-bluetooth
-hal_bluetooth
-hal_bluetooth_server
} {
bluetooth_prop
}:file no_rw_file_perms;
......@@ -301,7 +301,7 @@ compatible_property_only(`
neverallow {
domain
-coredomain
-hal_wifi
-hal_wifi_server
-wificond
} {
wifi_prop
......
......@@ -26,3 +26,5 @@ neverallow { domain -netd -bpfloader } bpfloader_exec:file { execute execute_no_
neverallow bpfloader domain:{ tcp_socket udp_socket rawip_socket } *;
# only system_server, netd and bpfloader can read/write the bpf maps
neverallow { domain -system_server -netd -bpfloader} netd:bpf { map_read map_write };
dontaudit bpfloader self:capability sys_admin;
......@@ -214,7 +214,7 @@ compatible_property_only(`
domain
-coredomain
-bluetooth
-hal_bluetooth
-hal_bluetooth_server
} {
bluetooth_prop
}:property_service set;
......@@ -223,7 +223,7 @@ compatible_property_only(`
domain
-coredomain
-bluetooth
-hal_bluetooth
-hal_bluetooth_server
-vendor_init
} {
exported_bluetooth_prop
......@@ -232,7 +232,7 @@ compatible_property_only(`
neverallow {
domain
-coredomain
-hal_wifi
-hal_wifi_server
-wificond
} {
wifi_prop
......@@ -241,7 +241,7 @@ compatible_property_only(`
neverallow {
domain
-coredomain
-hal_wifi
-hal_wifi_server
-wificond
-vendor_init
} {
......@@ -293,7 +293,7 @@ compatible_property_only(`
domain
-coredomain
-bluetooth
-hal_bluetooth
-hal_bluetooth_server
} {
bluetooth_prop
}:file no_rw_file_perms;
......@@ -301,7 +301,7 @@ compatible_property_only(`
neverallow {
domain
-coredomain
-hal_wifi
-hal_wifi_server
-wificond
} {
wifi_prop
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment