android_system_sepolicy/clatd.te

# 464xlat daemon
type clatd, domain;
permissive_or_unconfined(clatd)
type clatd_exec, exec_type, file_type;

init_daemon_domain(clatd)
net_domain(clatd)
Fix clatd, broken by selinux policing /dev/tun Bug: 10175701 Change-Id: I185df22bdbaafd56725760ec6c71340b67455046 2013-08-04 23:32:56 -07:00			`# 464xlat daemon`
			`type clatd, domain;`
Make clatd permissive or unconfined. Otherwise we'll never see denials in userdebug or eng builds and never make progress on confining it. clatd does exist in AOSP and is built by default, and is started via netd. Change-Id: Iee6e0845fad7647962d73cb6d047f27924fa799a Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> 2014-02-11 06:45:28 -08:00			`permissive_or_unconfined(clatd)`
Fix clatd, broken by selinux policing /dev/tun Bug: 10175701 Change-Id: I185df22bdbaafd56725760ec6c71340b67455046 2013-08-04 23:32:56 -07:00			`type clatd_exec, exec_type, file_type;`

			`init_daemon_domain(clatd)`
			`net_domain(clatd)`