commit 8433578ea59fac62abdd5b9fdd35b1c7820fb55e
author Stephen Smalley <sds@tycho.nsa.gov> Thu Jun 19 10:54:15 2014 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Mon Jun 23 15:43:25 2014 -0400
tree fc1cf92158d703fafb4f1412744a68479d979a47
parent 70b6985d9d21d88ad9f956974f45ff63374e6485

Let netmgrd set net_radio_prop properties.

Also remove the legacy rule allowing setting of system_prop that predated
fixing property_contexts in external/sepolicy to label anything with a
net.rmnet prefix with radio_prop.

Change-Id: I5ccafcb31ec4004dfefcec8718907f6b6f3e0dfd
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

sepolicy/netmgrd.te

diff --git a/sepolicy/netmgrd.te b/sepolicy/netmgrd.te
index 7a326d3..69cce04 100644
--- a/sepolicy/netmgrd.te
+++ b/sepolicy/netmgrd.te
@@ -18,7 +18,9 @@
 
 # set net.rmnet* properties.
 unix_socket_connect(netmgrd, property, init)
-allow netmgrd { radio_prop system_prop }:property_service set;
+allow netmgrd radio_prop:property_service set;
+auditallow netmgrd radio_prop:property_service set;
+allow netmgrd net_radio_prop:property_service set;
 
 # Talk to qmuxd (qmux_radio)
 qmux_socket(netmgrd)