f6bf7ef70c
Addreseses the following denials:
<5>[ 695.383994] type=1400 audit(1387403898.292:55): avc: denied { execute } for pid=5187 comm="dumpstate" name="ping" dev="mmcblk0p25" ino=213 scontext=u:r:dumpstate:s0 tcontext=u:object_r:ping_exec:s0 tclass=file
<5>[ 695.384727] type=1400 audit(1387403898.292:56): avc: denied { read open } for pid=5187 comm="dumpstate" name="ping" dev="mmcblk0p25" ino=213 scontext=u:r:dumpstate:s0 tcontext=u:object_r:ping_exec:s0 tclass=file
<5>[ 695.385418] type=1400 audit(1387403898.292:57): avc: denied { execute_no_trans } for pid=5187 comm="dumpstate" path="/system/bin/ping" dev="mmcblk0p25" ino=213 scontext=u:r:dumpstate:s0 tcontext=u:object_r:ping_exec:s0 tclass=file
<5>[ 695.391978] type=1400 audit(1387403898.302:58): avc: denied { create } for pid=5187 comm="ping" scontext=u:r:dumpstate:s0 tcontext=u:r:dumpstate:s0 tclass=rawip_socket
<5>[ 695.393193] type=1400 audit(1387403898.302:59): avc: denied { setopt } for pid=5187 comm="ping" scontext=u:r:dumpstate:s0 tcontext=u:r:dumpstate:s0 tclass=rawip_socket
<5>[ 695.393753] type=1400 audit(1387403898.302:60): avc: denied { getopt } for pid=5187 comm="ping" scontext=u:r:dumpstate:s0 tcontext=u:r:dumpstate:s0 tclass=rawip_socket
<5>[ 695.394886] type=1400 audit(1387403898.302:61): avc: denied { write } for pid=5187 comm="ping" scontext=u:r:dumpstate:s0 tcontext=u:r:dumpstate:s0 tclass=rawip_socket
<5>[ 695.400693] type=1400 audit(1387403898.312:62): avc: denied { read } for pid=5187 comm="ping" lport=4 scontext=u:r:dumpstate:s0 tcontext=u:r:dumpstate:s0 tclass=rawip_socket
Change-Id: If9a790725ec0ba1ca6cb5c9a8ed85288580940e8
16 lines
564 B
Text
16 lines
564 B
Text
type ping, domain;
|
|
type ping_exec, exec_type, file_type;
|
|
domain_auto_trans(shell, ping_exec, ping)
|
|
domain_auto_trans(dumpstate, ping_exec, ping)
|
|
|
|
allow ping self:capability net_raw;
|
|
allow ping self:rawip_socket create_socket_perms;
|
|
allow ping self:udp_socket create_socket_perms;
|
|
allow ping node:rawip_socket node_bind;
|
|
allow ping dnsproxyd_socket:sock_file write;
|
|
allow ping netd:unix_stream_socket connectto;
|
|
allow ping devpts:chr_file rw_file_perms;
|
|
allow ping shell:fd use;
|
|
|
|
allow ping dumpstate:fd use;
|
|
allow ping dumpstate:unix_stream_socket { read write };
|