diff options
| author | Nick Kralevich <nnk@google.com> | 2014-06-06 16:51:11 -0700 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2014-06-06 16:51:11 -0700 |
| commit | d7af45d3741648c45560797a5b6f02dec784668f (patch) | |
| tree | cc131366b2e92d48dda58c7524c7006575bdebe2 /access_vectors | |
| parent | 90cb59fd513441622323c77762a96df6a85a7100 (diff) | |
| download | android_external_sepolicy-d7af45d3741648c45560797a5b6f02dec784668f.tar.gz android_external_sepolicy-d7af45d3741648c45560797a5b6f02dec784668f.tar.bz2 android_external_sepolicy-d7af45d3741648c45560797a5b6f02dec784668f.zip | |
add attach_queue to tun_socket
Modeled after http://oss.tresys.com/pipermail/refpolicy/2013-January/006283.html
Addresses the following kernel error message:
<6>[ 3.855423] SELinux: Permission attach_queue in class tun_socket not defined in policy.
<6>[ 3.862482] SELinux: the above unknown classes and permissions will be denied
<7>[ 3.869668] SELinux: Completing initialization.
Change-Id: Iad87fcd5348d121a808dbe7ae3c63f8c90fc09fc
Diffstat (limited to 'access_vectors')
| -rw-r--r-- | access_vectors | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/access_vectors b/access_vectors index ff631f5..2655872 100644 --- a/access_vectors +++ b/access_vectors @@ -829,6 +829,9 @@ class kernel_service class tun_socket inherits socket +{ + attach_queue +} class x_pointer inherits x_device |