diff options
| author | Subash Abhinov Kasiviswanathan <subashab@codeaurora.org> | 2014-10-16 14:17:20 -0600 |
|---|---|---|
| committer | Avijit Kanti Das <avijitnsec@codeaurora.org> | 2014-10-20 11:36:17 -0700 |
| commit | 5280ce9b9bf52e4c1a9a34780fdf58b714817107 (patch) | |
| tree | 87a5f93c95da85c088c498dc28b0156a2cfcf176 | |
| parent | 4e2e5af6d4fe25131893381b315c5a9ee818b5fb (diff) | |
| download | android_device_qcom_sepolicy-5280ce9b9bf52e4c1a9a34780fdf58b714817107.tar.gz android_device_qcom_sepolicy-5280ce9b9bf52e4c1a9a34780fdf58b714817107.tar.bz2 android_device_qcom_sepolicy-5280ce9b9bf52e4c1a9a34780fdf58b714817107.zip | |
qmuxd: fix denial related to capability
Fix the following denial
Allow qmuxd to have the CAP_BLOCK_SUSPEND capability
[ 47.694567] type=1400 audit(1413464098.587:1914): avc: denied
{ block_suspend } for pid=1074 comm="qmuxd" capability=36
scontext=u:r:qmuxd:s0 tcontext=u:r:qmuxd:s0 tclass=capability2
permissive=0
CRs-Fixed: 740553
Change-Id: I39a1239f399b7d37709bac323594db2451e1b93c
| -rw-r--r-- | common/qmuxd.te | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/common/qmuxd.te b/common/qmuxd.te index 02b53f37..2c78b2c5 100644 --- a/common/qmuxd.te +++ b/common/qmuxd.te @@ -35,3 +35,6 @@ allow qmuxd sysfs_wake_lock:file { append open }; allow qmuxd sysfs:file w_file_perms; allow qmuxd self:capability { setuid setgid setpcap dac_override }; + +#Allow qmuxd to have the CAP_BLOCK_SUSPEND capability +allow qmuxd qmuxd:capability2 { block_suspend }; |