From 4ccd62b9ac4a4faafd224133b1a103b8f58761c3 Mon Sep 17 00:00:00 2001 From: Julien Bolard Date: Sun, 22 Nov 2015 12:25:20 -0200 Subject: SELinux: Fix errors from mlog_qmi daemon [ 975.964842] type=1400 audit(1446642899.043:386): avc: denied { net_bind_service } for pid=9887 comm=mlog_qmi_servic capability=10 scontext=u:r:mlog_qmi:s0 tcontext=u:r:mlog_qmi:s0 tclass=capability permissive=0 [ 980.851345] type=1400 audit(1446642903.923:387): avc: denied { net_raw } for pid=9916 comm=mlog_qmi_servic capability=13 scontext=u:r:mlog_qmi:s0 tcontext=u:r:mlog_qmi:s0 tclass=capability permissive=0 Signed-off-by: Humberto Borba Signed-off-by: Julien Bolard Change-Id: If7e31433325dd607877bd5110a8936024584ff28 --- sepolicy/mlog_qmi.te | 1 + 1 file changed, 1 insertion(+) (limited to 'sepolicy') diff --git a/sepolicy/mlog_qmi.te b/sepolicy/mlog_qmi.te index 4509083..76f6841 100644 --- a/sepolicy/mlog_qmi.te +++ b/sepolicy/mlog_qmi.te @@ -4,6 +4,7 @@ type mlog_qmi_exec, exec_type, file_type; # Started by init init_daemon_domain(mlog_qmi) +allow mlog_qmi self:capability { net_raw net_bind_service }; allow mlog_qmi self:socket create_socket_perms; # Access to /dev/smem_log -- cgit v1.2.3