From a6f88c73dcf40d178500c996363bee67e99c1200 Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Mon, 6 Jan 2014 16:24:23 -0800
Subject: [PATCH] Revert "Make ping enforcing."
Causing adbd to run at 100% cpu utilization when the following
sequence of commands are run:
1) Run the command "adb shell ping -c 1 -w 5 www.google.com" for 5 times
2) Run "adb shell top -m 5"
The following denial occurs:
<5>[ 20.647559] type=1400 audit(1389054327.861:21): avc: denied { sigchld } for pid=1989 comm="adbd" scontext=u:r:ping:s0 tcontext=u:r:adbd:s0 tclass=process
Reverting for now.
This reverts commit 1b556c3270b3af0d2123901f7b31e105bb22f8fe.
Bug: 12251052
Change-Id: I1b9920624f49b0aed2226c41a45005aff228d9e8
---
ping.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/ping.te b/ping.te
index a53f05756..20ec97a25 100644
--- a/ping.te
+++ b/ping.te
@@ -1,4 +1,5 @@
type ping, domain;
+permissive ping;
type ping_exec, exec_type, file_type;
domain_auto_trans(shell, ping_exec, ping)
domain_auto_trans(dumpstate, ping_exec, ping)
--
GitLab