Skip to content
Snippets Groups Projects
Commit 1f525e23 authored by Sandeep Patil's avatar Sandeep Patil
Browse files

DO NOT MERGE: use 'expandattribute' for untrusted_app_visible_hwservice


Bug: 62658302
Test: Boot device and observe no new denials

Change-Id: If9a21610897b14a419f276289818127412c29c55
Signed-off-by: default avatarSandeep Patil <sspatil@google.com>
parent b96864eb
No related branches found
No related tags found
No related merge requests found
......@@ -160,7 +160,7 @@ neverallow all_untrusted_apps {
-hal_cas_hwservice
-untrusted_app_visible_hwservice
}:hwservice_manager find;
neverallow untrusted_app_visible_hwservice unlabeled:service_manager list; #TODO: b/62658302
# Make sure that the following services are never accessible by untrusted_apps
neverallow all_untrusted_apps {
default_android_hwservice
......
......@@ -156,6 +156,7 @@ expandattribute vendor_executes_system_violators false;
# attribute to be submitted to AOSP in order to maintain their
# app-visibility.
attribute untrusted_app_visible_hwservice;
expandattribute untrusted_app_visible_hwservice false;
# halserver domains that are accessible to untrusted applications. These
# domains are typically those hosting hwservices attributed by the
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment