| commit | 9e61f56d5c64ffde1006493eed5553644fb8b06c | [log] [tgz] |
|---|---|---|
| author | Treehugger Robot <treehugger-gerrit@google.com> | Thu Sep 28 21:11:28 2017 +0000 |
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Thu Sep 28 21:11:28 2017 +0000 |
| tree | c8bcb74c76c9ad475da857650e1dedccaa789169 | |
| parent | 5bb3c603f1bb60bf94c978868bfb2fcc6c238381 [diff] | |
| parent | 148674ab161d810ff1c6a98e1e324d3ac434b33f [diff] |
Merge "Allow dumpstate to run iotop"
diff --git a/public/dumpstate.te b/public/dumpstate.te index d0204a5..42d9290 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te
@@ -250,6 +250,9 @@ # Allow dumpstate to run ip xfrm policy allow dumpstate self:netlink_xfrm_socket { create_socket_perms_no_ioctl nlmsg_read }; +# Allow dumpstate to run iotop +allow dumpstate self:netlink_socket create_socket_perms_no_ioctl; + ### ### neverallow rules ###