Google Git
Sign in
android / platform / system / sepolicy / 4c8eaba75ac980805e0ab844afff5c062359d7ad
commit4c8eaba75ac980805e0ab844afff5c062359d7ad[log] [tgz]
authorNick Kralevich <nnk@google.com>Thu Oct 18 15:07:40 2018 -0700
committerNick Kralevich <nnk@google.com>Thu Oct 18 15:24:32 2018 -0700
tree4ef1d703a6d868a5521ccb95976a873fe03b0cb2
parent2581761e6811edc3e7ade390e1077ecc34742f72 [diff]
start enforcing ioctl restrictions on blk_file

Start enforcing the use of ioctl restrictions on all Android block
devices. Domains which perform ioctls on block devices must be explicit
about what ioctls they issue. The only ioctls allowed by default are
BLKGETSIZE64, BLKSSZGET, FIOCLEX, and FIONCLEX.

Test: device boots and no problems.
Change-Id: I1195756b20cf2b50bede1eb04a48145a97a35867
6 files changed
tree: 4ef1d703a6d868a5521ccb95976a873fe03b0cb2
  1. build/
  2. prebuilts/
  3. private/
  4. public/
  5. reqd_mask/
  6. tests/
  7. tools/
  8. vendor/
  9. .gitignore
  10. Android.bp
  11. Android.mk
  12. CleanSpec.mk
  13. definitions.mk
  14. MODULE_LICENSE_PUBLIC_DOMAIN
  15. NOTICE
  16. OWNERS
  17. PREUPLOAD.cfg
  18. README
  19. treble_sepolicy_tests_for_release.mk