Sepolicy changes to allow create socket
Allow cnd to create qipcrtr_socket Denial : avc: denied { create } for comm="cnd" scontext=u:r:cnd:s0 tcontext=u:r:cnd:s0 tclass=qipcrtr_socket permissive=1 Change-Id: I10885b9af1d362c2d04e5406ce618c0e6f84507f CRs-Fixed: TBD
This commit is contained in:
parent
e7994ced68
commit
8324dc3a97
1 changed files with 1 additions and 1 deletions
2
generic/vendor/common/cnd.te
vendored
2
generic/vendor/common/cnd.te
vendored
|
@ -41,11 +41,11 @@ allow cnd wpa_data_file:sock_file create_file_perms;
|
||||||
allow cnd self:capability2 block_suspend;
|
allow cnd self:capability2 block_suspend;
|
||||||
|
|
||||||
allow cnd self:udp_socket create_socket_perms;
|
allow cnd self:udp_socket create_socket_perms;
|
||||||
allow cnd self:qipcrtr_socket rw_socket_perms_no_ioctl;
|
|
||||||
allow cnd self:{
|
allow cnd self:{
|
||||||
# Allow receiving NETLINK responses from WLAN driver.
|
# Allow receiving NETLINK responses from WLAN driver.
|
||||||
netlink_socket
|
netlink_socket
|
||||||
netlink_generic_socket
|
netlink_generic_socket
|
||||||
|
qipcrtr_socket
|
||||||
} create_socket_perms_no_ioctl;
|
} create_socket_perms_no_ioctl;
|
||||||
|
|
||||||
allowxperm cnd self:udp_socket ioctl SIOCGIFMTU;
|
allowxperm cnd self:udp_socket ioctl SIOCGIFMTU;
|
||||||
|
|
Loading…
Reference in a new issue