Skip to content
Snippets Groups Projects
Commit d833f6ba authored by Alex Klyubin's avatar Alex Klyubin
Browse files

Move mdnsd policy to private

This leaves only the existence of mdnsd domain as public API. All
other rules are implementation details of this domains's policy and
are thus now private.

Test: No change to policy according to sesearch, except for
      disappearance of all allow rules to do with mdnsd_current (as
      expected).
Bug: 31364497

Change-Id: Ia4f01d91e7d593401e8cde2d796a0f1023f6dae4
parent 5470aefb
No related branches found
No related tags found
No related merge requests found
# type_transition must be private policy the domain_trans rules could stay
# public, but conceptually should go with this
# mdns daemon
typeattribute mdnsd mlstrustedsubject;
type mdnsd_exec, exec_type, file_type;
init_daemon_domain(mdnsd)
net_domain(mdnsd)
# Read from /proc/net
r_dir_file(mdnsd, proc_net)
# mdns daemon
type mdnsd, domain, mlstrustedsubject;
type mdnsd_exec, exec_type, file_type;
net_domain(mdnsd)
# Read from /proc/net
r_dir_file(mdnsd, proc_net)
type mdnsd, domain;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment