diff options
author | Nick Kralevich <nnk@google.com> | 2013-12-16 15:10:38 +0000 |
---|---|---|
committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | 2013-12-16 15:10:38 +0000 |
commit | 96c266c3901eeab0476c6d08459d5748ff28889d (patch) | |
tree | f8d1cb8b64e206b5dfc56b31af4cbd646950d273 | |
parent | 8b0ce1b189e1fde8f3b16a6758369bfbe690ead8 (diff) | |
parent | bc19050cdd0178bc43faa588acc1875ae5c0af2c (diff) | |
download | android_external_sepolicy-96c266c3901eeab0476c6d08459d5748ff28889d.tar.gz android_external_sepolicy-96c266c3901eeab0476c6d08459d5748ff28889d.tar.bz2 android_external_sepolicy-96c266c3901eeab0476c6d08459d5748ff28889d.zip |
Merge "put netd into net_domain"
-rw-r--r-- | netd.te | 6 |
1 files changed, 2 insertions, 4 deletions
@@ -3,15 +3,13 @@ type netd, domain; type netd_exec, exec_type, file_type; init_daemon_domain(netd) +net_domain(netd) + allow netd self:capability { net_admin net_raw kill fsetid }; allow netd self:netlink_kobject_uevent_socket *; allow netd self:netlink_route_socket *; allow netd self:netlink_nflog_socket *; allow netd self:rawip_socket *; -allow netd self:{ tcp_socket udp_socket } *; -allow netd node:{ tcp_socket udp_socket } node_bind; -allow netd port:{ tcp_socket udp_socket } name_bind; -allow netd port:tcp_socket name_connect; allow netd self:unix_stream_socket *; allow netd shell_exec:file rx_file_perms; allow netd system_file:file x_file_perms; |