Using macro "rx_file_perms" instead of "execute_no_trans".
Bug: 147320338 Test: Run the maintenance and check if the compiled is executed.
This commit is contained in:
parent
7d844ee436
commit
67e8fcc902
@ -37,7 +37,7 @@ allow iorapd self:global_capability_class_set sys_nice;
|
||||
unix_socket_connect(iorapd, traced_consumer, traced)
|
||||
|
||||
# Allow iorapd to execute compilation (iorap.cmd.compiler) in idle time.
|
||||
allow iorapd system_file:file execute_no_trans;
|
||||
allow iorapd system_file:file rx_file_perms;
|
||||
|
||||
###
|
||||
### neverallow rules
|
||||
|
Loading…
Reference in New Issue
Block a user