Merge "allow modprobe to read /proc/cmdline" am: 73c62d3516

Change-Id: I9007ab6dcbab6671a51afd1e3949e678570be194
This commit is contained in:
Steve Muckle 2020-05-06 00:46:00 +00:00 committed by Automerger Merge Worker
commit c9c8d130b9
2 changed files with 2 additions and 0 deletions

View file

@ -1,6 +1,7 @@
type modprobe, domain;
allow modprobe proc_modules:file r_file_perms;
allow modprobe proc_cmdline:file r_file_perms;
allow modprobe self:global_capability_class_set sys_module;
allow modprobe kernel:key search;
recovery_only(`

View file

@ -4,6 +4,7 @@ type vendor_modprobe, domain;
domain_trans(init, vendor_toolbox_exec, vendor_modprobe)
allow vendor_modprobe proc_modules:file r_file_perms;
allow vendor_modprobe proc_cmdline:file r_file_perms;
allow vendor_modprobe self:global_capability_class_set sys_module;
allow vendor_modprobe kernel:key search;