From f321456e28b4d36c6da7d8dbfe633a653e6f45d7 Mon Sep 17 00:00:00 2001
From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Tue, 11 Feb 2014 09:45:28 -0500
Subject: [PATCH] Make clatd permissive or unconfined.

Otherwise we'll never see denials in userdebug or eng builds and
never make progress on confining it.  clatd does exist in AOSP
and is built by default, and is started via netd.

Change-Id: Iee6e0845fad7647962d73cb6d047f27924fa799a
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
---
 clatd.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/clatd.te b/clatd.te
index dc62fb099..5483f4aa7 100644
--- a/clatd.te
+++ b/clatd.te
@@ -1,7 +1,7 @@
 # 464xlat daemon
 type clatd, domain;
+permissive_or_unconfined(clatd)
 type clatd_exec, exec_type, file_type;
 
 init_daemon_domain(clatd)
 net_domain(clatd)
-unconfined_domain(clatd)
-- 
GitLab