summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTreehugger Robot <treehugger-gerrit@google.com>2020-01-23 18:45:42 +0000
committerGerrit Code Review <noreply-gerritcodereview@google.com>2020-01-23 18:45:42 +0000
commita8a6463dfa73a0909dd6b72a12e095ce39a0e57e (patch)
tree2205cd68a0b33c54cd1646981228c8198eea8ba1
parentf86a1eece67b828a42fd4a913c69dfcbd7b04852 (diff)
parent0996257288887c898908892cb2b0c51155615ca7 (diff)
downloaddevice_google_wahoo-a8a6463dfa73a0909dd6b72a12e095ce39a0e57e.tar.gz
device_google_wahoo-a8a6463dfa73a0909dd6b72a12e095ce39a0e57e.tar.bz2
device_google_wahoo-a8a6463dfa73a0909dd6b72a12e095ce39a0e57e.zip
Merge "allow iptables to isatty()"
-rw-r--r--sepolicy/vendor/netutils_wrapper.te3
1 files changed, 2 insertions, 1 deletions
diff --git a/sepolicy/vendor/netutils_wrapper.te b/sepolicy/vendor/netutils_wrapper.te
index f1bec3b8..da72f978 100644
--- a/sepolicy/vendor/netutils_wrapper.te
+++ b/sepolicy/vendor/netutils_wrapper.te
@@ -1,6 +1,7 @@
# For netutils to be able to write their stdout stderr to the pipes opened by netmgrd
allow netutils_wrapper netmgrd:fd use;
-allow netutils_wrapper netmgrd:fifo_file { getattr read write append };
+allow netutils_wrapper netmgrd:fifo_file { getattr ioctl read write append };
+allowxperm netutils_wrapper netmgrd:fifo_file ioctl { TCGETS };
dontaudit netutils_wrapper netmgrd:socket { read write };
dontaudit netutils_wrapper netmgrd:unix_stream_socket { read write };