Merge "net_dns_prop: neverallow most access"

This commit is contained in:
Jeffrey Vander Stoep 2020-02-06 12:16:22 +00:00 committed by Gerrit Code Review
commit 9788ca1738

View File

@ -360,3 +360,7 @@ neverallow {
-installd
-zygote
} mirror_data_file:dir *;
# This property is being removed. Remove remaining access.
neverallow { domain -init -system_server -vendor_init } net_dns_prop:property_service set;
neverallow { domain -dumpstate -init -system_server -vendor_init } net_dns_prop:file read;