common/netd.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14

#Policies for IPv6 tethering
allow netd netd:capability { setgid setuid };
allow netd netd:packet_socket { create bind setopt read ioctl };
allow netd wfd_app:fd use;
allow netd wfd_app:tcp_socket { read write setopt getopt };

dontaudit netd self:capability sys_module;

#needed for ipt_TCPMSS and ip6t_TCPMSS
allow netd kernel:system module_request;
unix_socket_connect(netd, cnd, cnd)

allow netd wfdservice:fd use;
allow netd wfdservice:tcp_socket rw_socket_perms;