diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2012-01-04 12:33:27 -0500 |
|---|---|---|
| committer | Stephen Smalley <sds@tycho.nsa.gov> | 2012-01-04 12:33:27 -0500 |
| commit | 2dd4e51d5c2a2dfc0bfdee9303269f5a665f6e35 (patch) | |
| tree | 70cf7ff792b5f782a2963f87c873b7a7ae926af4 /netd.te | |
| download | android_external_sepolicy-2dd4e51d5c2a2dfc0bfdee9303269f5a665f6e35.tar.gz android_external_sepolicy-2dd4e51d5c2a2dfc0bfdee9303269f5a665f6e35.tar.bz2 android_external_sepolicy-2dd4e51d5c2a2dfc0bfdee9303269f5a665f6e35.zip | |
SE Android policy.
Diffstat (limited to 'netd.te')
| -rw-r--r-- | netd.te | 30 |
1 files changed, 30 insertions, 0 deletions
@@ -0,0 +1,30 @@ +# network manager +type netd, domain; +type netd_exec, exec_type, file_type; + +init_daemon_domain(netd) +typeattribute netd mlstrustedsubject; +allow netd self:capability { net_admin net_raw sys_module }; +allow netd self:netlink_kobject_uevent_socket *; +allow netd self:netlink_route_socket *; +allow netd self:netlink_nflog_socket *; +allow netd self:rawip_socket *; +allow netd self:udp_socket *; +allow netd node:udp_socket node_bind; +allow netd port:udp_socket name_bind; +allow netd self:unix_stream_socket *; +allow netd shell_exec:file rx_file_perms; +allow netd system_file:file x_file_perms; +allow netd devpts:chr_file rw_file_perms; + +# For /proc/sys/net/ipv[46]/route/flush. +# XXX Split /proc/sys/net into its own type. +allow netd proc:file write; + +# For firmware_path +# XXX Split into its own type. +allow netd sysfs:file write; + +# Load network drivers. +allow netd kernel:system module_request; + |