allow iptables to isatty()

Test: builds, atest
Bug: 143044679
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I3309ccf9be86f06405dc248cc69b0207114f855f
This commit is contained in:
Maciej Żenczykowski
2020-01-23 01:50:31 -08:00
parent ef7d1c2ff6
commit 0996257288

View File

@@ -1,6 +1,7 @@
# For netutils to be able to write their stdout stderr to the pipes opened by netmgrd
allow netutils_wrapper netmgrd:fd use;
allow netutils_wrapper netmgrd:fifo_file { getattr read write append };
allow netutils_wrapper netmgrd:fifo_file { getattr ioctl read write append };
allowxperm netutils_wrapper netmgrd:fifo_file ioctl { TCGETS };
dontaudit netutils_wrapper netmgrd:socket { read write };
dontaudit netutils_wrapper netmgrd:unix_stream_socket { read write };