| commit | 886aa54bab8f8c941bd32bd3317cc1c6c25ccaf5 | [log] [tgz] |
|---|---|---|
| author | Jeff Vander Stoep <jeffv@google.com> | Wed Mar 28 15:34:37 2018 -0700 |
| committer | Jeff Vander Stoep <jeffv@google.com> | Wed Mar 28 15:56:36 2018 -0700 |
| tree | 902d85901226ad4ce0b0ca9f08a58b12d9d2853d | |
| parent | c22f97119522920a7ce48e01d52d39b3ae39bd8f [diff] |
Improve neverallows on /proc and /sys Access to these files was removed in Oreo. Enforce that access is not granted by partners via neverallow rule. Also disallow most untrusted app access to net.dns.* properties. Bug: 77225170 Test: system/sepolicy/tools/build_policies.sh Change-Id: I85b634af509203393dd2d9311ab5d30c65f157c1