commit b300765095d05ecb40e23b262183dab6756810f0
author Stephen Smalley <sds@tycho.nsa.gov> Tue May 13 08:24:38 2014 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Tue May 13 08:24:38 2014 -0400
tree 40c8ad7fe1891e31e9704c1c09ff6c99065bfbaa
parent 02e715259542a283d3674420f605851bd53f9e3f

Allow ppp to inherit/use mtp unix datagram socket.

Resolves denials such as:
avc:  denied  { read write } for  path="socket:[33571]" dev="sockfs" ino=33571 scontext=u:r:ppp:s0 tcontext=u:r:mtp:s0 tclass=unix_dgram_socket

Change-Id: Icb1ee00d8513179039bfb738647f49480e836f25
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

ppp.te

diff --git a/ppp.te b/ppp.te
index bcab339..fb8641a 100644
--- a/ppp.te
+++ b/ppp.te
@@ -8,6 +8,7 @@
 net_domain(ppp)
 
 allow ppp mtp:socket rw_socket_perms;
+allow ppp mtp:unix_dgram_socket rw_socket_perms;
 allow ppp ppp_device:chr_file rw_file_perms;
 allow ppp self:capability net_admin;
 allow ppp system_file:file rx_file_perms;