tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "update_engine: Allow to tag sockets."

Browse source
This commit is contained in:
Alex Deymo 2017-02-24 18:02:49 +00:00 committed by Gerrit Code Review
commit 8d48aa7988
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
public/update_engine.te
View file

@ -6,6 +6,11 @@ type update_engine_data_file, file_type, data_file_type;
net_domain(update_engine); net_domain(update_engine);
# Read/[write] to /proc/net/xt_qtaguid/ctrl and /dev/xt_qtaguid to tag network
# sockets.
allow update_engine qtaguid_proc:file rw_file_perms;
allow update_engine qtaguid_device:chr_file r_file_perms;
# Following permissions are needed for update_engine. # Following permissions are needed for update_engine.
allow update_engine self:process { setsched }; allow update_engine self:process { setsched };
allow update_engine self:capability { fowner sys_admin }; allow update_engine self:capability { fowner sys_admin };