diff --git a/app.te b/app.te index 9324a6d83029b350111f97bb9839536ecdc0c988..f844221a13f2559171f8f0068a022c5804d861f1 100644 --- a/app.te +++ b/app.te @@ -102,6 +102,8 @@ allow untrusted_app node_type:{ tcp_socket udp_socket } node_bind; allow untrusted_app port_type:udp_socket name_bind; allow untrusted_app port_type:tcp_socket name_bind; unix_socket_connect(untrusted_app, dnsproxyd, netd) +# Get route information. +allow untrusted_app self:netlink_route_socket { create bind read nlmsg_read }; } # Bluetooth access. bool app_bluetooth false;