Merge "Add Selinux rule to allow iorapd to execute compiler." am: 88f2ed8186
am: 447fb2d958
am: 3a63ab10aa
Change-Id: I2ee4a741e73677a580a32e763f56964d1875aad5
This commit is contained in:
commit
59804075fc
1 changed files with 3 additions and 0 deletions
|
@ -36,6 +36,9 @@ allow iorapd self:global_capability_class_set sys_nice;
|
|||
# tracing sessions and read trace data.
|
||||
unix_socket_connect(iorapd, traced_consumer, traced)
|
||||
|
||||
# Allow iorapd to execute compilation (iorap.cmd.compiler) in idle time.
|
||||
allow iorapd system_file:file execute_no_trans;
|
||||
|
||||
###
|
||||
### neverallow rules
|
||||
###
|
||||
|
|
Loading…
Reference in a new issue