SELinux policy allowing netmgrd to set property value.
Allow netmgrd to talk to init over the property
socket and set net.rmnet values. This will address
the following denials.
avc: denied { write } for pid=20064 comm="netmgrd" name="property_service" dev="tmpfs" ino=8248 scontext=u:r:netmgrd:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file
avc: denied { connectto } for pid=650 comm="netmgrd" path="/dev/socket/property_service" scontext=u:r:netmgrd:s0 tcontext=u:r:init:s0 tclass=unix_stream_socket
avc: denied { set } for property=net.rmnet_usb0.dns1 scontext=u:r:netmgrd:s0 tcontext=u:object_r:radio_prop:s0 tclass=property_service
Change-Id: I2913cd6c0011531507f6fab06daa1178abb5d006
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>
1 file changed