| commit | 3079d01ad8b02a6bed7c916c7bb6090eca18f8d7 | [log] [tgz] |
|---|---|---|
| author | Jeff Vander Stoep <jeffv@google.com> | Wed Mar 28 15:34:37 2018 -0700 |
| committer | Jeff Vander Stoep <jeffv@google.com> | Thu Mar 29 11:11:23 2018 -0700 |
| tree | 9271aad410c38befa8eb070629920a5733f0f13a | |
| parent | fb735122be6d645db290b7e789255e234c809447 [diff] |
Improve neverallows on /proc and /sys Access to these files was removed in Oreo. Enforce that access is not granted by partners via neverallow rule. Also disallow most untrusted app access to net.dns.* properties. Bug: 77225170 Test: system/sepolicy/tools/build_policies.sh Change-Id: I85b634af509203393dd2d9311ab5d30c65f157c1 (cherry picked from commit 886aa54bab8f8c941bd32bd3317cc1c6c25ccaf5)