diff options
| author | Julien Bolard <jbolard@genymobile.com> | 2015-11-22 12:25:20 -0200 |
|---|---|---|
| committer | Max Weffers <rcstar6696@gmail.com> | 2017-01-30 15:31:46 +0100 |
| commit | 4ccd62b9ac4a4faafd224133b1a103b8f58761c3 (patch) | |
| tree | 1bc6994426019cf64c35e941e69a288c4247a35f /sepolicy | |
| parent | 4568da009bf68a0bc895f790b95a8e18fd5f47af (diff) | |
SELinux: Fix errors from mlog_qmi daemon
[ 975.964842] type=1400 audit(1446642899.043:386): avc: denied { net_bind_service } for pid=9887 comm=mlog_qmi_servic capability=10 scontext=u:r:mlog_qmi:s0 tcontext=u:r:mlog_qmi:s0 tclass=capability permissive=0
[ 980.851345] type=1400 audit(1446642903.923:387): avc: denied { net_raw } for pid=9916 comm=mlog_qmi_servic capability=13 scontext=u:r:mlog_qmi:s0 tcontext=u:r:mlog_qmi:s0 tclass=capability permissive=0
Signed-off-by: Humberto Borba <humberos@gmail.com>
Signed-off-by: Julien Bolard <jbolard@genymobile.com>
Change-Id: If7e31433325dd607877bd5110a8936024584ff28
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/mlog_qmi.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sepolicy/mlog_qmi.te b/sepolicy/mlog_qmi.te index 4509083..76f6841 100644 --- a/sepolicy/mlog_qmi.te +++ b/sepolicy/mlog_qmi.te @@ -4,6 +4,7 @@ type mlog_qmi_exec, exec_type, file_type; # Started by init init_daemon_domain(mlog_qmi) +allow mlog_qmi self:capability { net_raw net_bind_service }; allow mlog_qmi self:socket create_socket_perms; # Access to /dev/smem_log |