tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "clatd: remove spurious privs"

Browse source
This commit is contained in:
Treehugger Robot 2022-01-21 11:46:55 +00:00 committed by Gerrit Code Review
commit e939178d89
1 changed files with 0 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
private/clatd.te
View file

@ -4,18 +4,10 @@ type clatd_exec, system_file_type, exec_type, file_type;
net_domain(clatd) net_domain(clatd)
r_dir_file(clatd, proc_net_type)
userdebug_or_eng(`
auditallow clatd proc_net_type:{ dir file lnk_file } { getattr open read };
')
# Access objects inherited from netd. # Access objects inherited from netd.
allow clatd netd:fd use; allow clatd netd:fd use;
allow clatd netd:fifo_file { read write };
allow clatd netd:packet_socket { read write }; allow clatd netd:packet_socket { read write };
allow clatd netd:rawip_socket { read write }; allow clatd netd:rawip_socket { read write };
allow clatd self:global_capability_class_set { net_admin net_raw setuid setgid };
allow clatd self:netlink_route_socket nlmsg_write; allow clatd self:netlink_route_socket nlmsg_write;
allow clatd tun_device:chr_file rw_file_perms; allow clatd tun_device:chr_file rw_file_perms;