NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

non_plat: netd: suppress dir write to /system

Browse Source 
Based on: https://review.lineageos.org/c/LineageOS/android_system_sepolicy/+/302134

Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: Ibf9e78f53d79304d70eddd16063bfedae3d0c05f
This commit is contained in:
Aayush Gupta 2021-01-21 10:46:01 +05:30
parent 8d01032f5f
commit ad66e2bf76
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
non_plat/netd.te
View File

@ -1,2 +1,6 @@
allow netd mtkimsmddomain:fd use;
allow netd mtkimsmddomain:{ tcp_socket udp_socket} { read write getopt setopt };
# Acquire advisory lock on /system/etc/xtables.lock. If this file doesn't
# exist, suppress the denial.
dontaudit netd system_file:dir write;