PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "grant bpfloader CAP_CHOWN"

Browse Source
This commit is contained in:
Maciej Żenczykowski 2020-02-14 21:19:16 +00:00 committed by Gerrit Code Review
commit 1d896ff5e5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
private/bpfloader.te
View File

@ -12,7 +12,7 @@ allow bpfloader devpts:chr_file { read write };
# for retrieving a pinned map when bpfloader do a run time restart.
allow bpfloader self:bpf { prog_load prog_run map_read map_write map_create };
allow bpfloader self:global_capability_class_set sys_admin;
allow bpfloader self:capability { chown sys_admin };
###
### Neverallow rules