Android R Beta 3
Remove mlstrustedsubject from modem_diagnostic_app.

This is too powerful: it gives the app the ability to access all
app_private_data files.

Instead, make the fiag_socket that it needs to access
mlstrustedobject. This preserves the ability for the app to access the
socket.

(Note that this is already how it is handled for e.g. coral-sepolicy.)

Test: builds
Test: presubmits
Change-Id: Ia23305c1837a459022f987a2e42c3e0791996864
2 files changed
tree: e37757a99c1589dcc14f1d9940f99eb706c73b6a
  1. private/
  2. public/
  3. vendor/
  4. crosshatch-sepolicy.mk
  5. OWNERS