tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Add permissions to allow iface up/down"

Browse source
This commit is contained in:
Chris Weir 2022-12-13 00:18:00 +00:00 committed by Gerrit Code Review
commit 800a2c9f66
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
vendor/hal_can_socketcan.te vendored
View file

@ -9,10 +9,12 @@ init_daemon_domain(hal_can_socketcan)
allow hal_can_socketcan self:capability net_admin;
allow hal_can_socketcan self:netlink_route_socket { create bind write nlmsg_write read };
# Calling if_nametoindex(3) to open CAN sockets
# See man page for netdevice(7) for more info on ioctls
allow hal_can_socketcan self:udp_socket { create ioctl };
allowxperm hal_can_socketcan self:udp_socket ioctl {
SIOCGIFINDEX
SIOCGIFFLAGS
SIOCSIFFLAGS
};
# Communicating with SocketCAN interfaces and bringing them up/down