Skip to content
Snippets Groups Projects
Commit bc19050c authored by Nick Kralevich's avatar Nick Kralevich
Browse files

put netd into net_domain

This addresses the review comments from
https://android-review.googlesource.com/#/c/69855/

Change-Id: I4d4633db711695c7f959b60f247772b0ac67931f
parent 3867c037
No related branches found
No related tags found
No related merge requests found
...@@ -3,15 +3,13 @@ type netd, domain; ...@@ -3,15 +3,13 @@ type netd, domain;
type netd_exec, exec_type, file_type; type netd_exec, exec_type, file_type;
init_daemon_domain(netd) init_daemon_domain(netd)
net_domain(netd)
allow netd self:capability { net_admin net_raw kill fsetid }; allow netd self:capability { net_admin net_raw kill fsetid };
allow netd self:netlink_kobject_uevent_socket *; allow netd self:netlink_kobject_uevent_socket *;
allow netd self:netlink_route_socket *; allow netd self:netlink_route_socket *;
allow netd self:netlink_nflog_socket *; allow netd self:netlink_nflog_socket *;
allow netd self:rawip_socket *; allow netd self:rawip_socket *;
allow netd self:{ tcp_socket udp_socket } *;
allow netd node:{ tcp_socket udp_socket } node_bind;
allow netd port:{ tcp_socket udp_socket } name_bind;
allow netd port:tcp_socket name_connect;
allow netd self:unix_stream_socket *; allow netd self:unix_stream_socket *;
allow netd shell_exec:file rx_file_perms; allow netd shell_exec:file rx_file_perms;
allow netd system_file:file x_file_perms; allow netd system_file:file x_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment