release-request-19a01df8-c865-44eb-b62e-053635f9998d-for-git_oc-vts-release-42...

release-request-19a01df8-c865-44eb-b62e-053635f9998d-for-git_oc-vts-release-4229236 snap-temp-L82900000087353736

Change-Id: I73c27dd639b84ec5538b4fe2baf14fcc4c8ff4b3

public/netd.te

@@ -104,7 +104,9 @@ neverallow netd system_file:dir_file_class_set write;
 # Write to files in /data/data or system files on /data
 neverallow netd { app_data_file system_data_file }:dir_file_class_set write;
 
-# only system_server, dumpstate and netd  may interact with netd over binder
+# only system_server and dumpstate may find netd service
 neverallow { domain -system_server -dumpstate -netd } netd_service:service_manager find;
-neverallow { domain -system_server -dumpstate } netd:binder call;
-neverallow netd { domain -system_server -servicemanager userdebug_or_eng(`-su') }:binder call;
+
+neverallow appdomain netd:binder call;
+neverallow netd { appdomain userdebug_or_eng(`-su') }:binder call;
+