commit 879909f4d6e803f74cb2c24ba24183ef05574aa7
author Paul Lawrence <paullawrence@google.com> Fri Jan 24 12:56:34 2025 -0800
committer Paul Lawrence <paullawrence@google.com> Mon Jan 27 12:39:07 2025 -0800
tree 4834e84ecff857a17a2f52a79a2c8c8fb1f2bc80
parent 1d45424c6a75cf46caaa8cc281ffbf2207d960bb

Policy for overlay_remounter

Test: Manual
Bug: 388912628
Change-Id: I9f27647f0e8d3ece229e7a46d50d54aa1f76fd76

private/netutils_wrapper.te

diff --git a/private/netutils_wrapper.te b/private/netutils_wrapper.te
index 37a2c47..28766dd 100644
--- a/private/netutils_wrapper.te
+++ b/private/netutils_wrapper.te
@@ -50,4 +50,4 @@
 # netutils wrapper may only use the following capabilities.
 neverallow netutils_wrapper self:global_capability_class_set ~{ net_admin net_raw };
 
-neverallow domain netutils_wrapper_exec:file execute_no_trans;
+neverallow { domain userdebug_or_eng(`-overlay_remounter') } netutils_wrapper_exec:file execute_no_trans;