Evolution-x-devices/device_google_wahoo
2
0
Fork 0
mirror of https://github.com/Evolution-X-Devices/device_google_wahoo synced 2026-02-01 07:50:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

netmgrd: remove access to system_file type.

Browse Source 
Bug: 111243627
Test: go/sedenials shows that netmgrd does not access system_file on wahoo
Change-Id: Id9c0e3439a89a233f9359fde4ab0b305005b7a19
This commit is contained in:
Tri Vo
2018-10-09 14:51:31 -07:00
parent b0fdf8aa1d
commit 985629b020
1 changed files with 0 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
sepolicy/vendor/netmgrd.te vendored
View File

@@ -27,11 +27,6 @@ allow netmgrd sysfs_soc:file r_file_perms;
allow netmgrd sysfs_msm_subsys:dir r_dir_perms;
allow netmgrd sysfs_msm_subsys:file r_file_perms;
allow netmgrd system_file:file lock;
# TODO(b/111243627): Expose required system components via separate types once
# we have enough information about what is needed by netmgrd.
auditallow netmgrd system_file:file lock;
r_dir_file(netmgrd, sysfs_msm_subsys)
wakelock_use(netmgrd)
@@ -54,10 +49,6 @@ dontaudit netmgrd kernel:system { module_request };
allow netmgrd proc_net:file rw_file_perms;
allow netmgrd netmgr_data_file:dir rw_dir_perms;
allow netmgrd netmgr_data_file:file create_file_perms;
allow netmgrd system_file:file execute_no_trans;
# TODO(b/117232795): Figure out what is executed by netmgrd in /system and route
# that dependency to netutils_wrapper.
auditallow netmgrd system_file:file execute_no_trans;
allow netmgrd self:capability { net_admin net_raw setgid setpcap setuid };