Allow dumpstate to access netlink_generic_socket

am: 98e99fb4 Change-Id: I9f903afeb92ff4ef4daac1755a829a3b792b5b07

Allow dumpstate to access netlink_generic_socket
c5f66b3d · Jin Qian · android-build-merger · a5153515 · 98e99fb4 · c5f66b3d
Commit c5f66b3d authored 7 years ago by Jin Qian Committed by android-build-merger 7 years ago
--- a/public/dumpstate.te
+++ b/public/dumpstate.te
@@ -263,6 +263,8 @@ allow dumpstate self:netlink_xfrm_socket { create_socket_perms_no_ioctl nlmsg_re

 # Allow dumpstate to run iotop
 allow dumpstate self:netlink_socket create_socket_perms_no_ioctl;
+# newer kernels (e.g. 4.4) have a new class for sockets
+allow dumpstate self:netlink_generic_socket create_socket_perms_no_ioctl;

 ###
 ### neverallow rules