diff options
author | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2021-06-28 22:04:06 +0000 |
---|---|---|
committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2021-06-28 22:04:06 +0000 |
commit | 90ec76046afaa6053626987e42e6033b1b274199 (patch) | |
tree | eb960f4580beb078d8940cdcb054d5d3778b1de5 | |
parent | ab669365ea23fb6404d1ae45237b712d289b90c8 (diff) | |
parent | 263f4c655d578559180759e56e145a71437e1f52 (diff) | |
download | device_mediatek_wembley-sepolicy-simpleperf-release.tar.gz device_mediatek_wembley-sepolicy-simpleperf-release.tar.bz2 device_mediatek_wembley-sepolicy-simpleperf-release.zip |
Snap for 7502275 from 263f4c655d578559180759e56e145a71437e1f52 to simpleperf-releasesimpleperf-release
Change-Id: If138a15577286c2d9849f7fa205485ddf57fdf7a
-rw-r--r-- | OWNERS | 5 | ||||
-rw-r--r-- | non_plat/mtk_hal_audio.te | 3 |
2 files changed, 6 insertions, 2 deletions
@@ -1 +1,4 @@ -include device/mediatek/wembley-kernel:/OWNERS +# This file ships to AOSP, so we can't reference internal lists. +# So we provide an explicit OWNERS list. +gkaiser@google.com +tjoines@google.com diff --git a/non_plat/mtk_hal_audio.te b/non_plat/mtk_hal_audio.te index 48ef236..ea6e647 100644 --- a/non_plat/mtk_hal_audio.te +++ b/non_plat/mtk_hal_audio.te @@ -27,7 +27,8 @@ neverallow mtk_hal_audio { file_type fs_type }:file execute_no_trans; # mtk_hal_audio should never need network access. # Disallow network sockets. -neverallow mtk_hal_audio domain:{ tcp_socket udp_socket rawip_socket } *; +neverallow mtk_hal_audio domain:{ udp_socket rawip_socket } *; +neverallow mtk_hal_audio { domain userdebug_or_eng(`-su') }:tcp_socket *; # Date : WK14.32 # Operation : Migration |