From 3d3d370bbb45f8d1ab9195e13971962fa323bd9c Mon Sep 17 00:00:00 2001
From: Josh Gao <jmgao@google.com>
Date: Tue, 21 Mar 2017 15:44:11 -0700
Subject: [PATCH] Mark system_ndebug_socket as mlstrustedobject.
Address the following denial:
audit(0.0:644): avc: denied { write } for name="ndebugsocket" dev="dm-2" ino=654091 scontext=u:r:crash_dump:s0:c512,c768 tcontext=u:object_r:system_ndebug_socket:s0 tclass=sock_file permissive=0
Bug: http://b/36278094
Test: mm
Change-Id: I0df115a3682385cee72adbfc4687221cd7c51a4d
---
public/file.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/public/file.te b/public/file.te
index a13f39634..2abfe7062 100644
--- a/public/file.te
+++ b/public/file.te
@@ -242,7 +242,7 @@ type racoon_socket, file_type;
type rild_socket, file_type;
type rild_debug_socket, file_type;
type system_wpa_socket, file_type;
-type system_ndebug_socket, file_type;
+type system_ndebug_socket, file_type, mlstrustedobject;
type tombstoned_crash_socket, file_type, mlstrustedobject;
type tombstoned_intercept_socket, file_type;
type uncrypt_socket, file_type;
--
GitLab