annotate vendor components that access core data types

am: b7606d8693

Change-Id: Ic2f5839eb7ae98068663a58ca6f76ec66a3f4907
This commit is contained in:
Jeff Vander Stoep
2017-03-29 23:38:12 +00:00
committed by android-build-merger

View File

@@ -8,8 +8,12 @@ allow cnd self:capability { chown fsetid setgid setuid };
allow cnd self:udp_socket create_socket_perms;
allowxperm cnd self:udp_socket ioctl SIOCGIFMTU;
# TODO(b/36712542): Remove this once cnd stops accessing data
# outside /data/vendor.
typeattribute cnd coredata_in_vendor_violators;
allow cnd wpa_socket:dir w_dir_perms;
allow cnd wpa_socket:sock_file create_file_perms;
allow cnd wifi_data_file:dir search;
allow cnd sysfs_soc:dir search;
allow cnd sysfs_soc:file r_file_perms;