blob: 67c2e9ec3154489fbdc46302f351cae2a92e4a89 [file] [log] [blame]
Alex Klyubinf5446eb2017-03-23 14:27:32 -07001typeattribute netd coredomain;
2
dcashmancc39f632016-07-22 13:13:11 -07003init_daemon_domain(netd)
4
5# Allow netd to spawn dnsmasq in it's own domain
6domain_auto_trans(netd, dnsmasq_exec, dnsmasq)
7
8# Allow netd to start clatd in its own domain
9domain_auto_trans(netd, clatd_exec, clatd)
Chenbo Feng566411e2018-01-02 15:31:18 -080010
Chenbo Feng7b571042018-12-04 17:57:27 -080011# give netd permission to setup iptables rule with xt_bpf, attach program to cgroup, and read/write
12# the map created by bpfloader
13allow netd bpfloader:bpf { prog_run map_read map_write };