summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2021-06-28 22:04:06 +0000
committerAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2021-06-28 22:04:06 +0000
commit90ec76046afaa6053626987e42e6033b1b274199 (patch)
treeeb960f4580beb078d8940cdcb054d5d3778b1de5
parentab669365ea23fb6404d1ae45237b712d289b90c8 (diff)
parent263f4c655d578559180759e56e145a71437e1f52 (diff)
downloaddevice_mediatek_wembley-sepolicy-simpleperf-release.tar.gz
device_mediatek_wembley-sepolicy-simpleperf-release.tar.bz2
device_mediatek_wembley-sepolicy-simpleperf-release.zip
Snap for 7502275 from 263f4c655d578559180759e56e145a71437e1f52 to simpleperf-releasesimpleperf-release
Change-Id: If138a15577286c2d9849f7fa205485ddf57fdf7a
-rw-r--r--OWNERS5
-rw-r--r--non_plat/mtk_hal_audio.te3
2 files changed, 6 insertions, 2 deletions
diff --git a/OWNERS b/OWNERS
index 5e4ab6b..4fe3f9c 100644
--- a/OWNERS
+++ b/OWNERS
@@ -1 +1,4 @@
-include device/mediatek/wembley-kernel:/OWNERS
+# This file ships to AOSP, so we can't reference internal lists.
+# So we provide an explicit OWNERS list.
+gkaiser@google.com
+tjoines@google.com
diff --git a/non_plat/mtk_hal_audio.te b/non_plat/mtk_hal_audio.te
index 48ef236..ea6e647 100644
--- a/non_plat/mtk_hal_audio.te
+++ b/non_plat/mtk_hal_audio.te
@@ -27,7 +27,8 @@ neverallow mtk_hal_audio { file_type fs_type }:file execute_no_trans;
# mtk_hal_audio should never need network access.
# Disallow network sockets.
-neverallow mtk_hal_audio domain:{ tcp_socket udp_socket rawip_socket } *;
+neverallow mtk_hal_audio domain:{ udp_socket rawip_socket } *;
+neverallow mtk_hal_audio { domain userdebug_or_eng(`-su') }:tcp_socket *;
# Date : WK14.32
# Operation : Migration