commit e3caaaecc97ea475984cbe742d06a351cc4ba305
author Nick Kralevich <nnk@google.com> Wed Jan 14 13:29:22 2015 -0800
committer Nick Kralevich <nnk@google.com> Wed Jan 14 22:06:52 2015 +0000
tree 08ced0969bea94070ffd3ec0f3f6d00b231923df
parent 73eca2bc8cb85fa8312086b2ded0802fdae7e643

netmgrd: give explicit read access to /proc/net

We plan to remove /proc/net access from domain.te in a future
change. Make sure netmgrd doesn't depend on the rules in domain.te.

Bug: 9496886
Change-Id: I404385bdb473bc031549debbf5c45bb106003f48

sepolicy/netmgrd.te

diff --git a/sepolicy/netmgrd.te b/sepolicy/netmgrd.te
index 2bacdda..e1c9240 100644
--- a/sepolicy/netmgrd.te
+++ b/sepolicy/netmgrd.te
@@ -20,7 +20,8 @@
 allow netmgrd shared_log_device:chr_file rw_file_perms;
 
 # Access to /proc/sys/net/*
-allow netmgrd proc_net:file write;
+allow netmgrd proc_net:file rw_file_perms;
+allow netmgrd proc_net:dir r_dir_perms;
 
 # Runs /system/bin/toolbox
 allow netmgrd system_file:file rx_file_perms;