commit d9e221b227499bf72a1986c7ed73d7dd6d013e5e
author Chris Fries <cfries@motorola.com> Wed Jul 22 15:56:30 2015 -0500
committer Vineeta Srivastava <vsrivastava@google.com> Wed Jul 22 17:43:00 2015 -0700
tree 1c44b925ff81c70a478ac8453e3d361211e1523b
parent 3c4bd9459591bc04ab5c77baf8a41affd10a8142

sepolicy: Allow kernel net_admin

Set ip address for factory cable BLAN interface.

type=1400 audit(1421250569.675:15): avc: denied { net_admin } for pid=156 comm="kworker/0:2" capability=12 scontext=u:r:kernel:s0 tcontext=u:r:kernel:s0 tclass=capability permissive=0

Bug: 22637358
Change-Id: I990b5c63db85fa1d74a797d8a4abcf1e0ff35fe7

sepolicy/kernel.te

diff --git a/sepolicy/kernel.te b/sepolicy/kernel.te
new file mode 100644
index 0000000..7ec5720
--- /dev/null
+++ b/sepolicy/kernel.te
@@ -0,0 +1 @@
+allow kernel self:capability net_admin;