Files
device_google_wahoo/sepolicy/vendor/netd.te
Jeff Vander Stoep a63fd3aadb Clean up denials
avc: denied { search } for name="/" scontext=u:r:kernel:s0
tcontext=u:object_r:persist_file:s0 tclass=dir
avc: denied { search } for name="ipc_logging" dev="debugfs"
scontext=u:r:kernel:s0 tcontext=u:object_r:debugfs_ipc:s0
tclass=dir
avc: denied { sys_module } scontext=u:r:netd:s0
tcontext=u:r:netd:s0 tclass=capability

Bug: 35197529
Test: build, verify denials no longer occur.
Change-Id: Ibe18ca05f2d80343624d08116b83b5287239c01a
2017-06-27 14:30:18 -07:00

5 lines
129 B
Plaintext

allow netd sysfs_net:file w_file_perms;
dontaudit netd kernel:system module_request;
dontaudit netd self:capability sys_module;