Skip to content
Snippets Groups Projects
  • Chenbo Feng's avatar
    185941aa
    sepolicy: allow netd to write to qtaguid file · 185941aa
    Chenbo Feng authored
    Since all qtaguid related userspace implementation are moved into netd
    and will use netd to choose which module to run at run time. Netd module
    should be the only process can directly read/write to the ctrl file of
    qtaguid located at /proc/net/xt_qtaguid/ctrl. This sepolicy change grant
    netd the privilege to access qtaguid proc files. It also grant netd the
    permission to control trigger to turn on and off qtaguid module by write
    parameters to files under sys_fs. The file and directory related is
    properly labled.
    
    Bug: 68774956
    Bug: 30950746
    Test: qtaguid function still working after the native function is
    redirected.
    
    Change-Id: Ia6db6f16ecbf8c58f631c79c9b4893ecf2cc607b
    185941aa
    History
    sepolicy: allow netd to write to qtaguid file
    Chenbo Feng authored
    Since all qtaguid related userspace implementation are moved into netd
    and will use netd to choose which module to run at run time. Netd module
    should be the only process can directly read/write to the ctrl file of
    qtaguid located at /proc/net/xt_qtaguid/ctrl. This sepolicy change grant
    netd the privilege to access qtaguid proc files. It also grant netd the
    permission to control trigger to turn on and off qtaguid module by write
    parameters to files under sys_fs. The file and directory related is
    properly labled.
    
    Bug: 68774956
    Bug: 30950746
    Test: qtaguid function still working after the native function is
    redirected.
    
    Change-Id: Ia6db6f16ecbf8c58f631c79c9b4893ecf2cc607b