tree 489f24b1f4c118d5004412f4ff1ad35e0d6de9fb
parent d7b910cf62cc304428b805c89159c8e96a77ded0
author Nick Kralevich <nnk@google.com> 1423273832 -0800
committer Nick Kralevich <nnk@google.com> 1423273832 -0800

dontaudit sensors self:capability net_raw

The kernel code does a permission check of both net_bind_service and
net_raw, and allows access if either one returns true.
It does the net_raw check first, triggering an SELinux denial.
No need to audit.

Addresses the following denial:

  avc: denied { net_raw } for pid=272 comm="sensors.qcom" capability=13 scontext=u:r:sensors:s0 tcontext=u:r:sensors:s0 tclass=capability permissive=0

Bug: 18417109
Change-Id: I1519371b81ca3d061042ff2e9eb2afc5927c65b1