commit a712b3dbd37a29dc43e091d0055c8549f7366236
author Treehugger Robot <treehugger-gerrit@google.com> Sun Jan 19 19:18:28 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Sun Jan 19 19:18:28 2020 +0000
tree 5d0c1235ef7ae6d9d9b277fe66460eb1665ee3fb
parent 73ed785807e8e21b1cc0e0272b9ae7c08a9c7aba
parent 4a865b30899581af4f90461cad8023eeb38ffc0e

Merge "add dontaudit dnsmasq kernel:system module_request"

public/dnsmasq.te

diff --git a/public/dnsmasq.te b/public/dnsmasq.te
index d189c89..86f1eb1 100644
--- a/public/dnsmasq.te
+++ b/public/dnsmasq.te
@@ -23,3 +23,6 @@
 allow dnsmasq netd:unix_stream_socket { getattr read write };
 allow dnsmasq netd:unix_dgram_socket { read write };
 allow dnsmasq netd:udp_socket { read write };
+
+# sometimes a network device vanishes and we try to load module netdev-{devicename}
+dontaudit dnsmasq kernel:system module_request;