Skip to content
Snippets Groups Projects
Commit 0a10b00e authored by Lorenzo Colitti's avatar Lorenzo Colitti Committed by android-build-merger
Browse files

Don't allow dumpstate to call ioctl on netlink_tcpdiag_socket. am: a8239c61 

am: 1376638d

Change-Id: Ief3104b69f825a47c68dfa1bf0c372e340fabd6d
parents b4e26018 1376638d
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 1 addition and 1 deletion
dumpstate.te
+ 1
− 1
View file @ 0a10b00e
...@@ -142,7 +142,7 @@ allow dumpstate net_data_file:dir search; ...@@ -142,7 +142,7 @@ allow dumpstate net_data_file:dir search;
allow dumpstate net_data_file:file r_file_perms; allow dumpstate net_data_file:file r_file_perms;
# List sockets via ss. # List sockets via ss.
allow dumpstate self:netlink_tcpdiag_socket { create_socket_perms nlmsg_read }; allow dumpstate self:netlink_tcpdiag_socket { create_socket_perms_no_ioctl nlmsg_read };
# Access /data/tombstones. # Access /data/tombstones.
allow dumpstate tombstone_data_file:dir r_dir_perms; allow dumpstate tombstone_data_file:dir r_dir_perms;
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment