Skip to content
Snippets Groups Projects
Commit bd743354 authored by android-build-team Robot's avatar android-build-team Robot
Browse files

Snap for 4801384 from b5e493d8 to pi-release 

Change-Id: Id6fb5c76d1d804b80a46cd7596f70addfaaeac5f
parents 774378fc b5e493d8
No related branches found
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
prebuilts/api/28.0/private/bpfloader.te
+ 2
− 0
View file @ bd743354
...@@ -26,3 +26,5 @@ neverallow { domain -netd -bpfloader } bpfloader_exec:file { execute execute_no_ ...@@ -26,3 +26,5 @@ neverallow { domain -netd -bpfloader } bpfloader_exec:file { execute execute_no_
neverallow bpfloader domain:{ tcp_socket udp_socket rawip_socket } *; neverallow bpfloader domain:{ tcp_socket udp_socket rawip_socket } *;
# only system_server, netd and bpfloader can read/write the bpf maps # only system_server, netd and bpfloader can read/write the bpf maps
neverallow { domain -system_server -netd -bpfloader} netd:bpf { map_read map_write }; neverallow { domain -system_server -netd -bpfloader} netd:bpf { map_read map_write };
dontaudit bpfloader self:capability sys_admin;
prebuilts/api/28.0/public/property.te
+ 6
− 6
View file @ bd743354
...@@ -214,7 +214,7 @@ compatible_property_only(` ...@@ -214,7 +214,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
} { } {
bluetooth_prop bluetooth_prop
}:property_service set; }:property_service set;
...@@ -223,7 +223,7 @@ compatible_property_only(` ...@@ -223,7 +223,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
-vendor_init -vendor_init
} { } {
exported_bluetooth_prop exported_bluetooth_prop
...@@ -232,7 +232,7 @@ compatible_property_only(` ...@@ -232,7 +232,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
} { } {
wifi_prop wifi_prop
...@@ -241,7 +241,7 @@ compatible_property_only(` ...@@ -241,7 +241,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
-vendor_init -vendor_init
} { } {
...@@ -293,7 +293,7 @@ compatible_property_only(` ...@@ -293,7 +293,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
} { } {
bluetooth_prop bluetooth_prop
}:file no_rw_file_perms; }:file no_rw_file_perms;
...@@ -301,7 +301,7 @@ compatible_property_only(` ...@@ -301,7 +301,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
} { } {
wifi_prop wifi_prop
......
private/bpfloader.te
+ 2
− 0
View file @ bd743354
...@@ -26,3 +26,5 @@ neverallow { domain -netd -bpfloader } bpfloader_exec:file { execute execute_no_ ...@@ -26,3 +26,5 @@ neverallow { domain -netd -bpfloader } bpfloader_exec:file { execute execute_no_
neverallow bpfloader domain:{ tcp_socket udp_socket rawip_socket } *; neverallow bpfloader domain:{ tcp_socket udp_socket rawip_socket } *;
# only system_server, netd and bpfloader can read/write the bpf maps # only system_server, netd and bpfloader can read/write the bpf maps
neverallow { domain -system_server -netd -bpfloader} netd:bpf { map_read map_write }; neverallow { domain -system_server -netd -bpfloader} netd:bpf { map_read map_write };
dontaudit bpfloader self:capability sys_admin;
public/property.te
+ 6
− 6
View file @ bd743354
...@@ -214,7 +214,7 @@ compatible_property_only(` ...@@ -214,7 +214,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
} { } {
bluetooth_prop bluetooth_prop
}:property_service set; }:property_service set;
...@@ -223,7 +223,7 @@ compatible_property_only(` ...@@ -223,7 +223,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
-vendor_init -vendor_init
} { } {
exported_bluetooth_prop exported_bluetooth_prop
...@@ -232,7 +232,7 @@ compatible_property_only(` ...@@ -232,7 +232,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
} { } {
wifi_prop wifi_prop
...@@ -241,7 +241,7 @@ compatible_property_only(` ...@@ -241,7 +241,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
-vendor_init -vendor_init
} { } {
...@@ -293,7 +293,7 @@ compatible_property_only(` ...@@ -293,7 +293,7 @@ compatible_property_only(`
domain domain
-coredomain -coredomain
-bluetooth -bluetooth
-hal_bluetooth -hal_bluetooth_server
} { } {
bluetooth_prop bluetooth_prop
}:file no_rw_file_perms; }:file no_rw_file_perms;
...@@ -301,7 +301,7 @@ compatible_property_only(` ...@@ -301,7 +301,7 @@ compatible_property_only(`
neverallow { neverallow {
domain domain
-coredomain -coredomain
-hal_wifi -hal_wifi_server
-wificond -wificond
} { } {
wifi_prop wifi_prop
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment