| commit | 57df7115cabbaee064922e17f899ea2b4f22a234 | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Thu Nov 06 19:22:03 2014 +0000 |
| committer | Android Git Automerger <android-git-automerger@android.com> | Thu Nov 06 19:22:03 2014 +0000 |
| tree | 60bf5f665ea275ac26b3f0475257a23783d239b9 | |
| parent | 98ada9a6b2a40d04cba7a58ee67a8a7c5b7f1634 [diff] | |
| parent | 35a4ed80a68d71df2cf138d17ea09fd782a1d73e [diff] |
am 35a4ed80: Add wpa neverallow rule * commit '35a4ed80a68d71df2cf138d17ea09fd782a1d73e': Add wpa neverallow rule
diff --git a/wpa.te b/wpa.te index 7b1a875..d6fae63 100644 --- a/wpa.te +++ b/wpa.te
@@ -37,3 +37,11 @@ userdebug_or_eng(` unix_socket_send(wpa, wpa, su) ') + +### +### neverallow rules +### + +# wpa_supplicant should not trust any data from sdcards +neverallow wpa sdcard_type:dir ~getattr; +neverallow wpa sdcard_type:file *;