| commit | e0bbb9f85a5df8512d28c16aaafa5fabef52e5a7 | [log] [tgz] |
|---|---|---|
| author | Martijn Coenen <maco@google.com> | Thu Jan 24 20:07:20 2019 +0100 |
| committer | Martijn Coenen <maco@google.com> | Thu Jan 24 20:27:54 2019 +0000 |
| tree | 250e973096453f867b55dc948cd62f75cbab16a7 | |
| parent | 74ea1f29eb4098efc614ae6b86161421530acf7f [diff] |
Add more neverallows to app_zygote policy. The app_zygote should never use any unix sockets, except the logd socket and some sockets only available on userdebug/eng. Prevent it from using ptrace. Bug: 111434506 Test: builds Change-Id: Ic47cfca51fba0b150a136194ba0e4a8a488c9996