PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Explicitly allow netd to take the iptables lock.

Browse Source 
am: 9273c1bb5c

Change-Id: Ie4aec7f6b6cfe675bd69df399fa63ef1194b84ac
This commit is contained in:
Lorenzo Colitti 2017-07-16 17:20:56 +00:00 committed by android-build-merger
commit f692d2fd91
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
public/netd.te
View File

@ -55,6 +55,9 @@ allow netd net_data_file:file create_file_perms;
allow netd net_data_file:dir rw_dir_perms;
allow netd self:capability fowner;
# Needed to lock the iptables lock.
allow netd system_file:file lock;
# Allow netd to spawn dnsmasq in it's own domain
allow netd dnsmasq:process signal;