commit cc32f9fe84a2b088192d1166d1f610fc181f029f
author android-build-prod (mdb) <android-build-team-robot@google.com> Thu Aug 20 20:00:42 2020 +0000
committer android-build-prod (mdb) <android-build-team-robot@google.com> Thu Aug 20 20:00:42 2020 +0000
tree b7aa2fb7695d1952096c6dedc190f74677d3f98c
parent 3d26afc19bce005cac7fe3f3fd6bc933803f8dd7
parent 9dc17d30c7f5ad420322349ab70621b2d126c526

Snap for 6779616 from 9dc17d30c7f5ad420322349ab70621b2d126c526 to android10-tests-release

Change-Id: Ia5211fe87f6d5fe3d1be35c9e26fcc697d0b521e

public/hal_audio.te

diff --git a/public/hal_audio.te b/public/hal_audio.te
index bb9eec4..2ce953a 100644
--- a/public/hal_audio.te
+++ b/public/hal_audio.te
@@ -27,10 +27,6 @@
 # Should never execute any executable without a domain transition
 neverallow hal_audio_server { file_type fs_type }:file execute_no_trans;
 
-# Should never need network access.
-# Disallow network sockets.
-neverallow hal_audio_server domain:{ tcp_socket udp_socket rawip_socket } *;
-
 # Only audio HAL may directly access the audio hardware
 neverallow { halserverdomain -hal_audio_server -hal_omx_server } audio_device:chr_file *;