diff options
author | RGIB <gibellini.roberto@gmail.com> | 2016-11-12 17:33:18 +0100 |
---|---|---|
committer | RGIB <gibellini.roberto@gmail.com> | 2016-11-12 17:33:18 +0100 |
commit | 2f6c7f36412046bd8b67ffbf511ffa74d7cc6842 (patch) | |
tree | 46d643bdf87f5219afc6112dba760e57ca61d716 /selinux/netmgrd.te | |
parent | 59404fd3487ba4b00a342434ce11a694c41bc954 (diff) | |
download | device_samsung_i9305-2f6c7f36412046bd8b67ffbf511ffa74d7cc6842.tar.gz device_samsung_i9305-2f6c7f36412046bd8b67ffbf511ffa74d7cc6842.tar.bz2 device_samsung_i9305-2f6c7f36412046bd8b67ffbf511ffa74d7cc6842.zip |
i9305 : second cleanup
Change-Id: If165d1a1a65bccf2f2303fdf44cee47c682c5a4e
Diffstat (limited to 'selinux/netmgrd.te')
-rwxr-xr-x | selinux/netmgrd.te | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/selinux/netmgrd.te b/selinux/netmgrd.te deleted file mode 100755 index 11159a4..0000000 --- a/selinux/netmgrd.te +++ /dev/null @@ -1,29 +0,0 @@ -# Network utilities (radio process) -type netmgrd, domain; -type netmgrd_exec, exec_type, file_type; - -# Started by init -init_daemon_domain(netmgrd) - -allow netmgrd self:udp_socket { create ioctl }; -# fsetid, dac_override unlink on /dev/socket/qmux_radio/qmux_client_socket -allow netmgrd self:capability { sys_module fsetid setuid setgid net_admin net_raw dac_override }; -allow netmgrd self:packet_socket { write bind read create }; -allow netmgrd self:netlink_socket { write read create bind setopt }; -allow netmgrd self:netlink_route_socket { create bind read write nlmsg_read nlmsg_write setopt getattr }; -allow netmgrd kernel:system module_request; - -# Talk to qmuxd -qmux_socket(netmgrd) - -# Allow logging diagnostic items -allow netmgrd diagnostic_device:chr_file rw_file_perms; - -# /data/data_test/ access with shell -allow netmgrd shell_exec:file { execute read open execute_no_trans }; -allow netmgrd system_file:file { execute_no_trans }; - -# Talk to init over the property socket -unix_socket_connect(netmgrd, property, init) -# Set net.rmnet_usb0. values -allow netmgrd radio_prop:property_service set; |