Skip to content
Snippets Groups Projects
Commit 2257ca7a authored by Nick Kralevich's avatar Nick Kralevich Committed by Gerrit Code Review
Browse files

Merge "Allow netd-spawned domains to use inherited netd unix_dgram_socket."

parents a478477c 08461cb0
No related branches found
No related tags found
No related merge requests found
...@@ -20,3 +20,4 @@ allow dnsmasq netd:netlink_kobject_uevent_socket { read write }; ...@@ -20,3 +20,4 @@ allow dnsmasq netd:netlink_kobject_uevent_socket { read write };
allow dnsmasq netd:netlink_nflog_socket { read write }; allow dnsmasq netd:netlink_nflog_socket { read write };
allow dnsmasq netd:netlink_route_socket { read write }; allow dnsmasq netd:netlink_route_socket { read write };
allow dnsmasq netd:unix_stream_socket { read write }; allow dnsmasq netd:unix_stream_socket { read write };
allow dnsmasq netd:unix_dgram_socket { read write };
...@@ -17,8 +17,10 @@ allow hostapd wpa_socket:dir create_dir_perms; ...@@ -17,8 +17,10 @@ allow hostapd wpa_socket:dir create_dir_perms;
allow hostapd wpa_socket:sock_file create_file_perms; allow hostapd wpa_socket:sock_file create_file_perms;
allow hostapd netd:fd use; allow hostapd netd:fd use;
allow hostapd netd:udp_socket { read write }; allow hostapd netd:udp_socket { read write };
allow hostapd netd:fifo_file { read write };
# TODO: Investigate whether these inherited sockets should be closed on exec.
allow hostapd netd:netlink_kobject_uevent_socket { read write }; allow hostapd netd:netlink_kobject_uevent_socket { read write };
allow hostapd netd:netlink_nflog_socket { read write }; allow hostapd netd:netlink_nflog_socket { read write };
allow hostapd netd:netlink_route_socket { read write }; allow hostapd netd:netlink_route_socket { read write };
allow hostapd netd:unix_stream_socket { read write }; allow hostapd netd:unix_stream_socket { read write };
allow hostapd netd:fifo_file { read write }; allow hostapd netd:unix_dgram_socket { read write };
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment