tree b80e3517f274cd80d81c1474454e28f5e1d57aa0
parent e02e6c03a59d1f60f07affa8540b74aca077a6c8
author Jeff Vander Stoep <jeffv@google.com> 1450809574 -0800
committer Jeff Vander Stoep <jeffv@google.com> 1451938519 -0800

Reduce socket ioctl perms

Reduce the socket ioctl commands available to untrusted/isolated apps.
Neverallow accessing sensitive information or setting of network parameters.
Neverallow access to device private ioctls i.e. device specific
customizations as these are a common source of driver bugs.

Define common ioctl commands in ioctl_defines.

Bug: 26267358
Change-Id: Ic5c0af066e26d4cb2867568f53a3e65c5e3b5a5d