tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge changes If2413c30,Ic5d7c961

Browse source 
am: 45b4704e01

Change-Id: I29d90373b7cc4350244c81f9a5b24c31453d987d
This commit is contained in:
Jeff Vander Stoep 2018-04-11 15:00:07 -07:00 committed by android-build-merger
commit 1382984cfc
2 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
private/netutils_wrapper.te
View file

@ -33,3 +33,9 @@ domain_auto_trans({
-coredomain
-appdomain
}, netutils_wrapper_exec, netutils_wrapper)
# suppress spurious denials
dontaudit netutils_wrapper self:global_capability_class_set sys_resource;
# netutils wrapper may only use the following capabilities.
neverallow netutils_wrapper self:global_capability_class_set ~{ net_admin net_raw };

3
private/zygote.te
View file

@ -114,6 +114,9 @@ allow zygote tmpfs:dir r_dir_perms;
get_prop(zygote, overlay_prop)
get_prop(zygote, exported_overlay_prop)
# ingore spurious denials
dontaudit zygote self:capability sys_resource;
###
### neverallow rules
###