tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "netd dontaudit fsetid"

Browse source
This commit is contained in:
Nick Kralevich 2015-04-03 13:13:12 +00:00 committed by Gerrit Code Review
commit b5b1e81146
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
netd.te
View file

@ -11,9 +11,8 @@ allow netd self:capability { net_admin net_raw kill };
# than one of the groups assigned to the current process to see if
# the setgid bit should be cleared, regardless of whether the setgid
# bit was even set. We do not appear to truly need this capability
# for netd to operate. Uncomment the dontaudit rule below after
# sufficient testing of the fsetid removal.
# dontaudit netd self:capability fsetid;
# for netd to operate.
dontaudit netd self:capability fsetid;
allow netd self:netlink_kobject_uevent_socket create_socket_perms;
allow netd self:netlink_route_socket nlmsg_write;