From 7cfabc06fd5b18931b51a92d8ee1a586c81328fc Mon Sep 17 00:00:00 2001 From: sbrissen Date: Fri, 5 Dec 2014 14:23:09 -0500 Subject: t0lte: initial L bring up -selinux policies still need work -switch fstab to by-name Change-Id: I397931d0aa2ea7887774007acf40c9f03e66fb14 --- selinux/netmgrd.te | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'selinux/netmgrd.te') diff --git a/selinux/netmgrd.te b/selinux/netmgrd.te index 11159a4..0f31fad 100755 --- a/selinux/netmgrd.te +++ b/selinux/netmgrd.te @@ -2,9 +2,11 @@ type netmgrd, domain; type netmgrd_exec, exec_type, file_type; +net_domain(netmgrd) # Started by init init_daemon_domain(netmgrd) + allow netmgrd self:udp_socket { create ioctl }; # fsetid, dac_override unlink on /dev/socket/qmux_radio/qmux_client_socket allow netmgrd self:capability { sys_module fsetid setuid setgid net_admin net_raw dac_override }; @@ -27,3 +29,5 @@ allow netmgrd system_file:file { execute_no_trans }; unix_socket_connect(netmgrd, property, init) # Set net.rmnet_usb0. values allow netmgrd radio_prop:property_service set; + +allow netmgrd netmgrd:process { execmem }; -- cgit v1.2.3