tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow snapuserd to inotify watch /dev/socket."

Browse source
This commit is contained in:
David Anderson 2021-08-05 16:40:57 +00:00 committed by Gerrit Code Review
commit f855bc1231
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/snapuserd.te
View file

@ -42,7 +42,7 @@ allow snapuserd kernel:fd use;
set_prop(snapuserd, snapuserd_prop)
# For inotify watching for /dev/socket/snapuserd_proxy to appear.
allow snapuserd tmpfs:dir read;
allow snapuserd tmpfs:dir { read watch };
# Forbid anything other than snapuserd and init setting snapuserd properties.
neverallow {