diff options
author | RGIB <gibellini.roberto@gmail.com> | 2016-04-04 16:23:21 +0200 |
---|---|---|
committer | Roberto Gibellini <gibellini.roberto@gmail.com> | 2016-04-05 14:32:20 -0700 |
commit | db70d22263602fb90fffdfa277eff287c3fee757 (patch) | |
tree | a1aca3140c3d7e44959e7567bf9a7304ad116838 /selinux/netmgrd.te | |
parent | f29e5e4bf0661a744456580ec17033170eee4aa5 (diff) | |
download | device_samsung_kona-common-db70d22263602fb90fffdfa277eff287c3fee757.zip device_samsung_kona-common-db70d22263602fb90fffdfa277eff287c3fee757.tar.gz device_samsung_kona-common-db70d22263602fb90fffdfa277eff287c3fee757.tar.bz2 |
kona : MM sepolicy
Change-Id: Ib7816ea15871cc75d8cd68a5d0cbcf5e6fe66c18
Diffstat (limited to 'selinux/netmgrd.te')
-rwxr-xr-x | selinux/netmgrd.te | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/selinux/netmgrd.te b/selinux/netmgrd.te deleted file mode 100755 index 11159a4..0000000 --- a/selinux/netmgrd.te +++ /dev/null @@ -1,29 +0,0 @@ -# Network utilities (radio process) -type netmgrd, domain; -type netmgrd_exec, exec_type, file_type; - -# Started by init -init_daemon_domain(netmgrd) - -allow netmgrd self:udp_socket { create ioctl }; -# fsetid, dac_override unlink on /dev/socket/qmux_radio/qmux_client_socket -allow netmgrd self:capability { sys_module fsetid setuid setgid net_admin net_raw dac_override }; -allow netmgrd self:packet_socket { write bind read create }; -allow netmgrd self:netlink_socket { write read create bind setopt }; -allow netmgrd self:netlink_route_socket { create bind read write nlmsg_read nlmsg_write setopt getattr }; -allow netmgrd kernel:system module_request; - -# Talk to qmuxd -qmux_socket(netmgrd) - -# Allow logging diagnostic items -allow netmgrd diagnostic_device:chr_file rw_file_perms; - -# /data/data_test/ access with shell -allow netmgrd shell_exec:file { execute read open execute_no_trans }; -allow netmgrd system_file:file { execute_no_trans }; - -# Talk to init over the property socket -unix_socket_connect(netmgrd, property, init) -# Set net.rmnet_usb0. values -allow netmgrd radio_prop:property_service set; |