Merge "Add Selinux rule to allow iorapd to execute compiler." am: 88f2ed8186 am: 447fb2d958

Change-Id: I85dacc88d5698c8378536467c843be0b228fd15c
This commit is contained in:
Automerger Merge Worker 2020-01-10 09:23:34 +00:00
commit 3a63ab10aa

View file

@ -36,6 +36,9 @@ allow iorapd self:global_capability_class_set sys_nice;
# tracing sessions and read trace data.
unix_socket_connect(iorapd, traced_consumer, traced)
# Allow iorapd to execute compilation (iorap.cmd.compiler) in idle time.
allow iorapd system_file:file execute_no_trans;
###
### neverallow rules
###