Merge "Using macro "rx_file_perms" instead of "execute_no_trans"." am: 1fbac29eba am: 2696b11045

Change-Id: Ia92c2fe3ca9474ed88ce2461b203014d48275548
This commit is contained in:
Automerger Merge Worker 2020-01-10 09:32:28 +00:00
commit d1ee2d89f8

View file

@ -37,7 +37,7 @@ allow iorapd self:global_capability_class_set sys_nice;
unix_socket_connect(iorapd, traced_consumer, traced)
# Allow iorapd to execute compilation (iorap.cmd.compiler) in idle time.
allow iorapd system_file:file execute_no_trans;
allow iorapd system_file:file rx_file_perms;
###
### neverallow rules