| commit | bd3e300a1309323e02c7144202acb48f40f11946 | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Tue Aug 07 13:44:20 2018 -0700 |
| committer | Nick Kralevich <nnk@google.com> | Tue Aug 07 13:47:36 2018 -0700 |
| tree | 64d0ceba663f35993bce1f6d6b2d9654e12dc7f7 | |
| parent | d90d001a780a96bdeb68aae5806ddcd4aaac8c11 [diff] |
Relax some neverallow rules Kernels above 4.14 have a new mmap permission. However, neverallow rules exclude the use of mmap, even when file FDs are passable across the vendor/non-vendor boundary. Since we allow reading / writing of passed file descriptors, also allow the use of mmap for passed file descriptors. Bug: 112171217 Test: policy compiles Change-Id: I8176f86960bdff0cf5de770809510e9df5d62db9