Remove net_raw capability from ims

net_raw was added to make IMS registration work in enforced mode

Currently ims is in permissive mode so any denials will not block
the functionality or lab testing

This change will enable QC to catch denials and fix in their prebuilts

Test: Basic telephony sanity

Bug: 37652052
Change-Id: I942a267464b83f60ef6274e47f1ae6a493230c1f
This commit is contained in:
Jayachandran C
2017-06-02 13:35:41 -07:00
parent c432ddbc04
commit b726f55f53

View File

@@ -13,8 +13,7 @@ allow ims sysfs_soc:dir search;
allow ims sysfs_soc:file r_file_perms;
allow ims sysfs_timestamp_switch:file r_file_perms;
# TODO(b/38228603): Remove net_raw upon resolution of this bug
allow ims self:capability { net_raw net_bind_service};
allow ims self:capability net_bind_service;
allow ims ion_device:chr_file r_file_perms;