2 commits

Author	SHA1	Message	Date
Jeff Vander Stoep	fb69c8e64f	netlink_route_socket: add new nlmsg_readpriv perm ... Used when mapping RTM_GETLINK messages to this new permission. Users of netlink_route_sockets that do not use the net_domain() macro will need to grant this permission as needed. Compatibility with older vendor images is preserved by granting all vendor domains access to this new permission in *.compat.cil files. Bug: 141455849 Test: build (this change is a no-op without kernel changes) Change-Id: I18f1c9fc958120a26b7b3bea004920d848ffb26e	2019-10-16 16:14:16 +02:00
Jeff Vander Stoep	564e292ae6	Add mechanism for granting permissions to old vendor images ... This addresses Treble backwards compat issues introduced in aosp/793958 and aosp/783669. Bug: 122874820 Test: build/flash blueline with pi-dev vendor and generic_ab system images. Test: adb pull /sys/fs/selinux/policy; sesearch policy --allowx -s vendordomain -t dev_type Change-Id: Ic2b304472bb88051e03740dc387834056aba641a	2019-05-06 12:32:51 -07:00