Merge "system_server: add policy for getConnectionOwnerUid API"

This commit is contained in:
Jeffrey Vander Stoep 2018-09-21 21:04:20 +00:00 committed by Gerrit Code Review
commit 7776cc3bc5

View file

@ -78,6 +78,9 @@ allow system_server self:global_capability2_class_set wake_alarm;
# Create and share netlink_netfilter_sockets for tetheroffload.
allow system_server self:netlink_netfilter_socket create_socket_perms_no_ioctl;
# Create/use netlink_tcpdiag_socket for looking up connection UIDs for VPN apps.
allow system_server self:netlink_tcpdiag_socket { create_socket_perms_no_ioctl nlmsg_read };
# Use netlink uevent sockets.
allow system_server self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;