Skip to content
Snippets Groups Projects
Commit d6094bd0 authored by Felipe Leme's avatar Felipe Leme Committed by android-build-merger
Browse files

Merge \\"Grant access to net_raw and net_admin to dumpstate.\\" am: 797f32b2 

am: fafcf5a1

Change-Id: Ifa88db9920a8cc1645c6fa0f313dba9f79b76260
parents cbc534af fafcf5a1
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 7 additions and 2 deletions
dumpstate.te
+ 7
− 2
View file @ d6094bd0
...@@ -13,8 +13,13 @@ allow dumpstate self:capability { setuid setgid sys_resource }; ...@@ -13,8 +13,13 @@ allow dumpstate self:capability { setuid setgid sys_resource };
# Allow dumpstate to scan through /proc/pid for all processes # Allow dumpstate to scan through /proc/pid for all processes
r_dir_file(dumpstate, domain) r_dir_file(dumpstate, domain)
# Send signals to processes allow dumpstate self:capability {
allow dumpstate self:capability kill; # Send signals to processes
kill
# Run iptables
net_raw
net_admin
};
# Allow executing files on system, such as: # Allow executing files on system, such as:
# /system/bin/toolbox # /system/bin/toolbox
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment