commit 1f07f442b9ea03c0b548da8bb04def118b0b5805
author Seungjae Yoo <seungjaeyoo@google.com> Mon Jun 17 06:01:38 2024 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Jun 17 06:01:38 2024 +0000
tree 832a6b2419b1fa0feec56e757685d869e8c3ce7b
parent d092943282e2a2eb5adbfd876862c04bf4361407
parent 086d1ecd3f8bf73829706a72cdfa6cd471483605

Merge "vmnic won't allow to call TUNSETPERSIST anymore" into main

private/vmnic.te

diff --git a/private/vmnic.te b/private/vmnic.te
index 1b7e0d8..4a706df 100644
--- a/private/vmnic.te
+++ b/private/vmnic.te
@@ -17,7 +17,7 @@
     allow vmnic self:global_capability_class_set net_admin;
     allow vmnic self:tun_socket create_socket_perms_no_ioctl;
     allow vmnic tun_device:chr_file rw_file_perms;
-    allowxperm vmnic tun_device:chr_file ioctl { TUNGETIFF TUNSETIFF TUNSETPERSIST };
+    allowxperm vmnic tun_device:chr_file ioctl { TUNGETIFF TUNSETIFF };
     allow vmnic self:udp_socket create_socket_perms;
     allowxperm vmnic self:udp_socket ioctl SIOCSIFFLAGS;