Skip to content
Snippets Groups Projects
Commit cf6b350a authored by Nick Kralevich's avatar Nick Kralevich
Browse files

Allow apps to execute ping

Addresses the following denials:

<5>[  170.166218] type=1400 audit(1386789488.029:57): avc:  denied  { getattr } for  pid=4352 comm="sh" path="/system/bin/ping" dev="mmcblk0p25" ino=182 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:ping_exec:s0 tclass=file
<5>[  170.166356] type=1400 audit(1386789488.029:58): avc:  denied  { execute } for  pid=4352 comm="sh" name="ping" dev="mmcblk0p25" ino=182 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:ping_exec:s0 tclass=file
<5>[  170.166841] type=1400 audit(1386789488.029:59): avc:  denied  { read open } for  pid=4389 comm="sh" name="ping" dev="mmcblk0p25" ino=182 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:ping_exec:s0 tclass=file
<5>[  170.166962] type=1400 audit(1386789488.029:60): avc:  denied  { execute_no_trans } for  pid=4389 comm="sh" path="/system/bin/ping" dev="mmcblk0p25" ino=182 scontext=u:r:untrusted_app:s0 tcontext=u:object_r:ping_exec:s0 tclass=file

Change-Id: Ic175ef7392897a3941c36db67dfa59ded35204b5
parent ca9ba328
No related branches found
No related tags found
No related merge requests found
...@@ -59,6 +59,7 @@ allow appdomain system_data_file:file { execute execute_no_trans open }; ...@@ -59,6 +59,7 @@ allow appdomain system_data_file:file { execute execute_no_trans open };
# Execute the shell or other system executables. # Execute the shell or other system executables.
allow appdomain shell_exec:file rx_file_perms; allow appdomain shell_exec:file rx_file_perms;
allow appdomain system_file:file rx_file_perms; allow appdomain system_file:file rx_file_perms;
allow appdomain ping_exec:file rx_file_perms;
# Read/write wallpaper file (opened by system). # Read/write wallpaper file (opened by system).
allow appdomain wallpaper_file:file { read write }; allow appdomain wallpaper_file:file { read write };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment