PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,717 Commits 17 Branches 0 Tags 41 MiB
4f9107df8f
Commit Graph

3 Commits

Author SHA1 Message Date
Jeffrey Vander Stoep
4f9107df8f Revert "Migrate to upstream policy version 30" 
This reverts commit 2ea23a6e1a.

Change-Id: I5e9efa56d74ab22030611cab515e050e0bb77aca
 2015-12-08 12:14:50 -08:00
Jeff Vander Stoep
2ea23a6e1a Migrate to upstream policy version 30 
Grant untrusted_app and isolated_app unpriv_sock_perms, neverallow
priv_sock_perms to disallow access to MAC address and ESSID.

Change-Id: Idac3b657a153e7d7fdc647ff34b876a325d759b3
 2015-12-08 07:18:41 -08:00
Jeff Vander Stoep
de9b5301a1 restrict app access to socket ioctls 
Create a macro of unprivileged ioctls including
- All common socket ioctls except MAC address
- All wireless extensions ioctls except get/set ESSID
- Some commonly used tty ioctls

Bug: 21657002
Change-Id: Ib08be9cb70d08c1fa2c8bddbae519e7c2df5293c
 2015-06-05 22:35:51 +00:00