platform_system_sepolicy/private/compat/29.0/29.0.compat.cil at 91ce5b9c22deabf77cb77695a73a8cb258c1aa6e - tequilaOS/platform_system_sepolicy - gitownia.eu

tequilaOS/platform_system_sepolicy

Jeff Vander Stoep fb69c8e64f netlink_route_socket: add new nlmsg_readpriv perm

Used when mapping RTM_GETLINK messages to this new permission.

Users of netlink_route_sockets that do not use the net_domain()
macro will need to grant this permission as needed. Compatibility
with older vendor images is preserved by granting all vendor domains
access to this new permission in *.compat.cil files.

Bug: 141455849
Test: build (this change is a no-op without kernel changes)
Change-Id: I18f1c9fc958120a26b7b3bea004920d848ffb26e

2019-10-16 16:14:16 +02:00

3 lines

165 B

Text

Raw Blame History

	`(typeattribute vendordomain)`
	`(typeattributeset vendordomain ((and (domain) ((not (coredomain))))))`
	`(allow vendordomain self (netlink_route_socket (nlmsg_readpriv)))`