platform_system_sepolicy/mdnsd.te

# mdns daemon
type mdnsd, domain, mlstrustedsubject;
type mdnsd_exec, exec_type, file_type;

init_daemon_domain(mdnsd)
net_domain(mdnsd)

# Read from /proc/net
r_dir_file(mdnsd, proc_net)
Add a domain for mdnsd and allow connecting to it. Change-Id: I0a06fa32a46e515671b4e9a6f68e1a3f8b2c21a8 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> 2014-02-24 19:04:49 +01:00			`# mdns daemon`
mdnsd: Remove domain_deprecated Remove domain_deprecated from mdnsd. This removes some unnecessarily permissive rules from mdnsd. As part of this, re-allow /proc/net access, which is removed as a result of removing domain_deprecated. Bug: 25433265 Change-Id: Ie1cf27179ac2e9170cf4cd418aea3256b9534603 2015-12-02 01:51:47 +01:00			`type mdnsd, domain, mlstrustedsubject;`
Add a domain for mdnsd and allow connecting to it. Change-Id: I0a06fa32a46e515671b4e9a6f68e1a3f8b2c21a8 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> 2014-02-24 19:04:49 +01:00			`type mdnsd_exec, exec_type, file_type;`

			`init_daemon_domain(mdnsd)`
			`net_domain(mdnsd)`
mdnsd: Remove domain_deprecated Remove domain_deprecated from mdnsd. This removes some unnecessarily permissive rules from mdnsd. As part of this, re-allow /proc/net access, which is removed as a result of removing domain_deprecated. Bug: 25433265 Change-Id: Ie1cf27179ac2e9170cf4cd418aea3256b9534603 2015-12-02 01:51:47 +01:00
			`# Read from /proc/net`
			`r_dir_file(mdnsd, proc_net)`