Skip to content
Snippets Groups Projects
Commit 6261dea3 authored by Stephen Smalley's avatar Stephen Smalley Committed by Nick Kralevich
Browse files

Allow fcntl F_SETLK on sockets.


Addresses denials such as:
type=1400 : avc: denied { lock } for comm="PushCheckSendS" path="socket:[1834573]" dev="sockfs" ino=X scontext=u:r:untrusted_app:s0 tcontext=u:r:untrusted_app:s0 tclass=tcp_socket

Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>

(cherry picked from commit 2c759185)

Bug: 18730521
Change-Id: Ie68955c26ddedb3acd7b7aa18afbf8b35c2c2f78
parent 6e12daf1
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment