Skip to content
Snippets Groups Projects
Commit dce86b3c authored by Jaekyun Seok's avatar Jaekyun Seok
Browse files

Neverallow unexpected domains to access bluetooth_prop and wifi_prop

And this CL will remove unnecessary vendor-init exceptions for nfc_prop
and radio_prop as well.

Bug: 77633703
Test: succeeded building and tested with Pixels
Change-Id: I468b8fd907c6408f51419cfb58eb2b8da29118ae
Merged-In: I468b8fd907c6408f51419cfb58eb2b8da29118ae
(cherry picked from commit 41e42d63)
parent 8ace0039
No related branches found
No related tags found
No related merge requests found
......@@ -154,7 +154,6 @@ compatible_property_only(`
-coredomain
-appdomain
-hal_nfc_server
-vendor_init
} {
nfc_prop
}:property_service set;
......@@ -167,11 +166,57 @@ compatible_property_only(`
-vendor_init
} {
exported_radio_prop
exported2_radio_prop
exported3_radio_prop
}:property_service set;
neverallow {
domain
-coredomain
-appdomain
-hal_telephony_server
} {
exported2_radio_prop
radio_prop
}:property_service set;
neverallow {
domain
-coredomain
-bluetooth
-hal_bluetooth
} {
bluetooth_prop
}:property_service set;
neverallow {
domain
-coredomain
-bluetooth
-hal_bluetooth
-vendor_init
} {
exported_bluetooth_prop
}:property_service set;
neverallow {
domain
-coredomain
-hal_wifi
-wificond
} {
wifi_prop
}:property_service set;
neverallow {
domain
-coredomain
-hal_wifi
-wificond
-vendor_init
} {
exported_wifi_prop
}:property_service set;
# Prevent properties from being read
neverallow {
domain
......@@ -200,7 +245,6 @@ compatible_property_only(`
-coredomain
-appdomain
-hal_nfc_server
-vendor_init
} {
nfc_prop
}:file no_rw_file_perms;
......@@ -210,8 +254,25 @@ compatible_property_only(`
-coredomain
-appdomain
-hal_telephony_server
-vendor_init
} {
radio_prop
}:file no_rw_file_perms;
neverallow {
domain
-coredomain
-bluetooth
-hal_bluetooth
} {
bluetooth_prop
}:file no_rw_file_perms;
neverallow {
domain
-coredomain
-hal_wifi
-wificond
} {
wifi_prop
}:file no_rw_file_perms;
')
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment