Merge "ppp: Allow specific ioctls on mtp:socket." am: 11ce09bc am: e8acb4f6

am: 294b7d22 Change-Id: I2479a5dad9e714352634c199101f70c253a7b34a

Merge "ppp: Allow specific ioctls on mtp:socket." am: 11ce09bc am: e8acb4f6
f8713811 · Jorge Lucangeli Obes · android-build-merger · 6a17aa16 · 294b7d22 · f8713811
Commit f8713811 authored 8 years ago by Jorge Lucangeli Obes Committed by android-build-merger 8 years ago
--- a/public/ppp.te
+++ b/public/ppp.te
@@ -7,7 +7,12 @@ net_domain(ppp)

 r_dir_file(ppp, proc_net)

-allow ppp mtp:socket rw_socket_perms_no_ioctl;
+allow ppp mtp:socket rw_socket_perms;
+
+# ioctls needed for VPN.
+allowxperm ppp self:udp_socket ioctl priv_sock_ioctls;
+allowxperm ppp mtp:socket ioctl ppp_ioctls;
+
 allow ppp mtp:unix_dgram_socket rw_socket_perms;
 allow ppp ppp_device:chr_file rw_file_perms;
 allow ppp self:capability net_admin;