| commit | 8f08456a94b629875a3792dac68c1dd5ac7cd5f5 | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Tue Oct 02 21:43:20 2018 -0700 |
| committer | Nick Kralevich <nnk@google.com> | Tue Oct 02 21:43:20 2018 -0700 |
| tree | 02ccd414294d1aa2a9ff4d51b385185eedb8211f | |
| parent | 7b785a9f5becdeef7ee8dbf62813e5eb44d79b41 [diff] |
isolated_apps: no socket create Isolated apps provide a very strict security guarantee, including the inability to create networking sockets like TCP / UDP sockets. Add an SELinux neverallow assertion to test for this and prevent regressions. Test: policy compiles. Change-Id: I2618abb17375707eb1048e89faa46f57d33e1df4