Files
device_google_wahoo/sepolicy/vendor/netutils_wrapper.te
Maciej Żenczykowski 0996257288 allow iptables to isatty()
Test: builds, atest
Bug: 143044679
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I3309ccf9be86f06405dc248cc69b0207114f855f
2020-01-23 01:50:42 -08:00

16 lines
736 B
Plaintext

# For netutils to be able to write their stdout stderr to the pipes opened by netmgrd
allow netutils_wrapper netmgrd:fd use;
allow netutils_wrapper netmgrd:fifo_file { getattr ioctl read write append };
allowxperm netutils_wrapper netmgrd:fifo_file ioctl { TCGETS };
dontaudit netutils_wrapper netmgrd:socket { read write };
dontaudit netutils_wrapper netmgrd:unix_stream_socket { read write };
dontaudit netutils_wrapper netmgrd:netlink_socket { getattr read write append };
dontaudit netutils_wrapper kernel:system module_request;
dontaudit netutils_wrapper self:capability sys_module;
userdebug_or_eng(`
allow netutils_wrapper diag_device:chr_file rw_file_perms;
')
dontaudit netutils_wrapper diag_device:chr_file rw_file_perms;