shell.te: Restore /proc/net access
The removal of domain_deprecated from the shell user in
https://android-review.googlesource.com/184260 removed /proc/net access.
Restore it.
Bug: 26075092
Change-Id: Iac21a1ec4b9e769c068bfdcdeeef8a7dbc93c593
diff --git a/shell.te b/shell.te
index cc2783c..6eb7e56 100644
--- a/shell.te
+++ b/shell.te
@@ -93,8 +93,9 @@
# don't allow shell to access GateKeeper service
allow shell { service_manager_type -gatekeeper_service }:service_manager find;
-# allow shell to look through /proc/ for ps, top
+# allow shell to look through /proc/ for ps, top, netstat
r_dir_file(shell, proc)
+r_dir_file(shell, proc_net)
r_dir_file(shell, cgroup)
allow shell domain:dir { search open read getattr };
allow shell domain:{ file lnk_file } { open read getattr };