| commit | 389fc497d087cd78734253c59e183b78d9bf04db | [log] [tgz] |
|---|---|---|
| author | Maciej Żenczykowski <maze@google.com> | Thu Dec 30 20:06:44 2021 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Thu Dec 30 20:06:44 2021 +0000 |
| tree | 7b09c03205330b54575d81e82e464d1f068ac76b | |
| parent | 113e9c8693027c7a12b1e7fa3979a8daef000699 [diff] | |
| parent | b2425a8e56f09fd2b2bc48f1c0cff921a43c4820 [diff] |
Merge "[NC#3] clatd: remove raw and packet socket creation privs" am: 0f1b55ee24 am: 7d517a3712 am: b2425a8e56 Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1903467 Change-Id: I2b3b6af74e202b53dbf3c9c343b83576511d81bb
diff --git a/private/clatd.te b/private/clatd.te index 104121e..da6820c 100644 --- a/private/clatd.te +++ b/private/clatd.te
@@ -18,5 +18,4 @@ allow clatd self:global_capability_class_set { net_admin net_raw setuid setgid }; allow clatd self:netlink_route_socket nlmsg_write; -allow clatd self:{ packet_socket rawip_socket } create_socket_perms_no_ioctl; allow clatd tun_device:chr_file rw_file_perms;