commit d80d664c6afb13a8c301e1fd642551848c7d6a83
author Sandeep Patil <sspatil@google.com> Thu Apr 13 20:38:56 2017 -0700
committer Sandeep Patil <sspatil@google.com> Fri Apr 14 09:21:06 2017 -0700
tree d11221a0c61d8dc9bf45fc8566eab39df6a29234
parent ec7244e51da173ee6d0778b479e5019cd0c48218

allow netmgrd to execute vendor shell and toybox

Bug: 36463595
Test: boot Sailfish and observe the auditallows for rild accessign
      system shell are gone.

Change-Id: Iab8ede48eccefb90f5ebdfcb466c36ce87dbc815
Signed-off-by: Sandeep Patil <sspatil@google.com>

sepolicy/netmgrd.te

diff --git a/sepolicy/netmgrd.te b/sepolicy/netmgrd.te
index 92556b0..b72ca1d 100644
--- a/sepolicy/netmgrd.te
+++ b/sepolicy/netmgrd.te
@@ -36,7 +36,9 @@
 
 # execute shell, ip, and toolbox
 allow netmgrd shell_exec:file rx_file_perms;
+allow netmgrd vendor_shell_exec:file rx_file_perms;
 allow netmgrd system_file:file rx_file_perms;
+allow netmgrd vendor_toolbox_exec:file rx_file_perms;
 allow netmgrd toolbox_exec:file rx_file_perms;
 
 # netmgrd sockets