sanders: update sepolicy.
-Fix Neverallows. -Fix missing type. -Fix type attributes. Signed-off-by: Ashwin R C <ashwin2001achu@gmail.com> Signed-off-by: ronaxdevil <pratabidya.007@gmail.com>
This commit is contained in:
12
sepolicy/vendor/netmgrd.te
vendored
12
sepolicy/vendor/netmgrd.te
vendored
@@ -1,8 +1,6 @@
|
||||
allow netmgrd netmgr_data_file:dir { add_name search write };
|
||||
allow netmgrd netmgr_data_file:file create;
|
||||
allow netmgrd netmgr_data_file:file rw_file_perms;
|
||||
allow netmgrd self:capability dac_override;
|
||||
allow netmgrd net_data_file:dir r_dir_perms;
|
||||
allow netmgrd netd_socket:sock_file write;
|
||||
# allow netmgrd toolbox_exec:file { execute getattr execute_no_trans read open };
|
||||
r_dir_file(netmgrd, net_data_file)
|
||||
allow netmgrd toolbox_exec:file { getattr read open };
|
||||
|
||||
allow netmgrd init:unix_stream_socket connectto;
|
||||
allow netmgrd property_socket:sock_file write;
|
||||
allow netmgrd system_file:file lock;
|
||||
|
||||
Reference in New Issue
Block a user