3 commits

Author	SHA1	Message	Date
Jeff Vander Stoep	d7a64e4e8b	racoon: remove domain_deprecated attribute ... Test: builds/boots on Angler. No "granted" messages for the removed permissions observed in three months of log audits. Bug: 28760354 Change-Id: Ib6da57f6249a5571015b649bae843590229be714	2016-10-15 17:15:25 -07:00
Jeff Vander Stoep	d063d23032	racoon: allow setting options on tun interface ... Fixes failure in VPN connection avc: denied { ioctl } for pid=2870 comm="ip-up-vpn" ioctlcmd=8914 scontext=u:r:racoon:s0 tcontext=u:r:racoon:s0 tclass=udp_socket avc: denied { ioctl } for pid=2870 comm="ip-up-vpn" ioctlcmd=8916 scontext=u:r:racoon:s0 tcontext=u:r:racoon:s0 tclass=udp_socket Test: VPN works Bug: 32011648 Change-Id: I28c4dc7ffbf7e35ef582176674c4e9764719a2a9	2016-10-15 14:09:45 -07:00
dcashman	cc39f63773	Split general policy into public and private components. ... Divide policy into public and private components. This is the first step in splitting the policy creation for platform and non-platform policies. The policy in the public directory will be exported for use in non-platform policy creation. Backwards compatibility with it will be achieved by converting the exported policy into attribute-based policy when included as part of the non-platform policy and a mapping file will be maintained to be included with the platform policy that maps exported attributes of previous versions to the current platform version. Eventually we would like to create a clear interface between the platform and non-platform device components so that the exported policy, and the need for attributes is minimal. For now, almost all types and avrules are left in public. Test: Tested by building policy and running on device. Change-Id: Idef796c9ec169259787c3f9d8f423edf4ce27f8c	2016-10-06 13:09:06 -07:00

Renamed from racoon.te (Browse further)