Allowlist stubby to be run within the path imposer
To support using google prod credentials for Google developers, we need
to be able to make an RPC call to exchange credentials. This RPC call
needs to be issued via stubby and hence allowlisting the stubby binary.
dwillemsen@ also pointed out that this should be less effective for
other tools running within the build since network access is disabled
for the other tools anyway via sandboxing.
Bug: b/222484146,b/235861862
Merged-In: I29aec9576e86b9ed3051df7943404abd478c549b
Change-Id: Iaabb5c51929768fef0a330ad300b25d72be6f0df
diff --git a/ui/build/paths/config.go b/ui/build/paths/config.go
index f4bb89f..1b6ec4f 100644
--- a/ui/build/paths/config.go
+++ b/ui/build/paths/config.go
@@ -102,6 +102,7 @@
"rsync": Allowed,
"sed": Allowed,
"sh": Allowed,
+ "stubby": Allowed,
"tar": Allowed,
"timeout": Allowed,
"tr": Allowed,