commit b5f788e7edd63045ff85a3720ff92441f498f8f2
author The Android Automerger <android-build@google.com> Tue Sep 17 21:11:08 2013 -0700
committer The Android Automerger <android-build@google.com> Tue Sep 17 21:11:08 2013 -0700
tree 219fffd16a9acaf16108d5453169b8b5cd4e1121
parent 3bb1ccc265bbc6e865506b38ae66721ec1177b55
parent fd7bf2a51f07bcddbc8a541c69b33a679f0f002c

merge in klp-release history after reset to klp-dev

installd.te

diff --git a/installd.te b/installd.te
index f8d30b7..db76531 100644
--- a/installd.te
+++ b/installd.te
@@ -17,6 +17,7 @@
 allow installd system_file:file x_file_perms;
 allow installd cgroup:dir create_dir_perms;
 allow installd download_file:dir { r_dir_perms };
+allow installd download_file:file { r_file_perms };
 dontaudit installd self:capability sys_admin;
 # Check validity of SELinux context before use.
 selinux_check_context(installd)

netd.te

diff --git a/netd.te b/netd.te
index f98be3d..0cd0872 100644
--- a/netd.te
+++ b/netd.te
@@ -3,7 +3,7 @@
 type netd_exec, exec_type, file_type;
 
 init_daemon_domain(netd)
-allow netd self:capability { net_admin net_raw kill };
+allow netd self:capability { net_admin net_raw kill fsetid };
 allow netd self:netlink_kobject_uevent_socket *;
 allow netd self:netlink_route_socket *;
 allow netd self:netlink_nflog_socket *;