diff options
| -rw-r--r-- | non_plat/mtk_hal_audio.te | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/non_plat/mtk_hal_audio.te b/non_plat/mtk_hal_audio.te index 48ef236..ea6e647 100644 --- a/non_plat/mtk_hal_audio.te +++ b/non_plat/mtk_hal_audio.te @@ -27,7 +27,8 @@ neverallow mtk_hal_audio { file_type fs_type }:file execute_no_trans; # mtk_hal_audio should never need network access. # Disallow network sockets. -neverallow mtk_hal_audio domain:{ tcp_socket udp_socket rawip_socket } *; +neverallow mtk_hal_audio domain:{ udp_socket rawip_socket } *; +neverallow mtk_hal_audio { domain userdebug_or_eng(`-su') }:tcp_socket *; # Date : WK14.32 # Operation : Migration |