From 33a779fecbdaa87756922adc690b4e38382d8e5f Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Wed, 14 Oct 2015 15:11:35 -0700
Subject: [PATCH] bluetooth.te: Relax bluetooth neverallow rule.
Bug: 24866874
Change-Id: Ic13ad4d3292fe8284e5771a28abaebb0ec9590f0
---
bluetooth.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/bluetooth.te b/bluetooth.te
index a79023dc2..f77bd0dbf 100644
--- a/bluetooth.te
+++ b/bluetooth.te
@@ -70,4 +70,4 @@ allow bluetooth shell_data_file:file read;
# Superuser capabilities.
# bluetooth requires net_admin and wake_alarm.
neverallow bluetooth self:capability ~net_admin;
-neverallow bluetooth self:capability2 ~wake_alarm;
+neverallow bluetooth self:capability2 ~{ wake_alarm block_suspend };
--
GitLab