diff options
author | Roberto Gibellini <gibellini.roberto@gmail.com> | 2016-11-19 17:21:50 -0700 |
---|---|---|
committer | Gerrit Code Review <gerrit@cyanogenmod.org> | 2016-11-19 16:36:52 -0800 |
commit | f2a3063bc88ee0a075c04fa274c10c39c7abfc9b (patch) | |
tree | 0042544658ce6961403f6eac79ca6217b8efc5cc /selinux/netmgrd.te | |
parent | b8ca7e9e41daaab93c33b136dd8f238606bf9352 (diff) | |
download | device_samsung_i9305-f2a3063bc88ee0a075c04fa274c10c39c7abfc9b.zip device_samsung_i9305-f2a3063bc88ee0a075c04fa274c10c39c7abfc9b.tar.gz device_samsung_i9305-f2a3063bc88ee0a075c04fa274c10c39c7abfc9b.tar.bz2 |
Revert "i9305 : second cleanup"
I'll push single commits
This reverts commit 2f6c7f36412046bd8b67ffbf511ffa74d7cc6842.
Change-Id: I147666b0637e2950612653ad680b7a1f33e173f0
Diffstat (limited to 'selinux/netmgrd.te')
-rwxr-xr-x | selinux/netmgrd.te | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/selinux/netmgrd.te b/selinux/netmgrd.te new file mode 100755 index 0000000..11159a4 --- /dev/null +++ b/selinux/netmgrd.te @@ -0,0 +1,29 @@ +# Network utilities (radio process) +type netmgrd, domain; +type netmgrd_exec, exec_type, file_type; + +# Started by init +init_daemon_domain(netmgrd) + +allow netmgrd self:udp_socket { create ioctl }; +# fsetid, dac_override unlink on /dev/socket/qmux_radio/qmux_client_socket +allow netmgrd self:capability { sys_module fsetid setuid setgid net_admin net_raw dac_override }; +allow netmgrd self:packet_socket { write bind read create }; +allow netmgrd self:netlink_socket { write read create bind setopt }; +allow netmgrd self:netlink_route_socket { create bind read write nlmsg_read nlmsg_write setopt getattr }; +allow netmgrd kernel:system module_request; + +# Talk to qmuxd +qmux_socket(netmgrd) + +# Allow logging diagnostic items +allow netmgrd diagnostic_device:chr_file rw_file_perms; + +# /data/data_test/ access with shell +allow netmgrd shell_exec:file { execute read open execute_no_trans }; +allow netmgrd system_file:file { execute_no_trans }; + +# Talk to init over the property socket +unix_socket_connect(netmgrd, property, init) +# Set net.rmnet_usb0. values +allow netmgrd radio_prop:property_service set; |