Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
A
AndroidSystemSEPolicy
Manage
Activity
Members
Code
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Deploy
Releases
Container Registry
Model registry
Analyze
Contributor analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
Werner Sembach
AndroidSystemSEPolicy
Commits
b5b1e811
Commit
b5b1e811
authored
9 years ago
by
Nick Kralevich
Committed by
Gerrit Code Review
9 years ago
Browse files
Options
Downloads
Plain Diff
Merge "netd dontaudit fsetid"
parents
93fd6f0a
8d200817
No related branches found
No related tags found
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
netd.te
+2
-3
2 additions, 3 deletions
netd.te
with
2 additions
and
3 deletions
netd.te
+
2
−
3
View file @
b5b1e811
...
@@ -11,9 +11,8 @@ allow netd self:capability { net_admin net_raw kill };
...
@@ -11,9 +11,8 @@ allow netd self:capability { net_admin net_raw kill };
# than one of the groups assigned to the current process to see if
# than one of the groups assigned to the current process to see if
# the setgid bit should be cleared, regardless of whether the setgid
# the setgid bit should be cleared, regardless of whether the setgid
# bit was even set. We do not appear to truly need this capability
# bit was even set. We do not appear to truly need this capability
# for netd to operate. Uncomment the dontaudit rule below after
# for netd to operate.
# sufficient testing of the fsetid removal.
dontaudit netd self:capability fsetid;
# dontaudit netd self:capability fsetid;
allow netd self:netlink_kobject_uevent_socket create_socket_perms;
allow netd self:netlink_kobject_uevent_socket create_socket_perms;
allow netd self:netlink_route_socket nlmsg_write;
allow netd self:netlink_route_socket nlmsg_write;
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment