commit 2c6a0eb2d9cad571cb2ed513f22c469231414364
author Treehugger Robot <treehugger-gerrit@google.com> Sat Mar 30 04:38:39 2019 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Sat Mar 30 04:38:39 2019 +0000
tree 9d20fd4ba0410ee1bf599d687b06cd5f4f66245e
parent aed7273584aa846a3d9114fa8e0fa77f15d0f084
parent c510da991843ea9c0400218b05d232ea3e8b9277

Merge "netutils_wrapper: suppress sysfs denials"

private/netutils_wrapper.te

diff --git a/private/netutils_wrapper.te b/private/netutils_wrapper.te
index fc01999..a773f96 100644
--- a/private/netutils_wrapper.te
+++ b/private/netutils_wrapper.te
@@ -36,6 +36,7 @@
 
 # suppress spurious denials
 dontaudit netutils_wrapper self:global_capability_class_set sys_resource;
+dontaudit netutils_wrapper sysfs_type:file read;
 
 # netutils wrapper may only use the following capabilities.
 neverallow netutils_wrapper self:global_capability_class_set ~{ net_admin net_raw };