commit 51a2238c9e8e3bede46c02f380fed22889db1218
author Treehugger Robot <treehugger-gerrit@google.com> Mon Mar 20 19:33:54 2017 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Mar 20 19:33:55 2017 +0000
tree 69414f5235cdd213428e508c56968f4d3bc35ae4
parent 11ce09bc14f60885b2aa7a22aabc7f5c02d2d235
parent 09d13e734d651e8cb92187f477e3cdc485128311

Merge "Switch Boot Control HAL policy to _client/_server"

public/ppp.te

diff --git a/public/ppp.te b/public/ppp.te
index 9c1b707..7a5eada 100644
--- a/public/ppp.te
+++ b/public/ppp.te
@@ -7,7 +7,12 @@
 
 r_dir_file(ppp, proc_net)
 
-allow ppp mtp:socket rw_socket_perms_no_ioctl;
+allow ppp mtp:socket rw_socket_perms;
+
+# ioctls needed for VPN.
+allowxperm ppp self:udp_socket ioctl priv_sock_ioctls;
+allowxperm ppp mtp:socket ioctl ppp_ioctls;
+
 allow ppp mtp:unix_dgram_socket rw_socket_perms;
 allow ppp ppp_device:chr_file rw_file_perms;
 allow ppp self:capability net_admin;