commit b38e2790944d028a81089ec088ded54f269aa1f2
author Lorenzo Colitti <lorenzo@google.com> Mon Feb 15 17:16:06 2016 +0900
committer Lorenzo Colitti <lorenzo@google.com> Tue Feb 16 10:11:49 2016 +0900
tree b8d8fa583feeb1811184cec606fa78bed2ff2d40
parent c1e48835078d60f969f2e0d6c69a8b7e698dbbac

Allow netd to use NETLINK_SOCK_DIAG.

This is needed to kill sockets using the new SOCK_DESTROY
operation instead of using SIOCKILLADDR.

Bug: 26976388
Change-Id: I01a63a754726a0e9fb68be48b76df4dc47752edb

netd.te

diff --git a/netd.te b/netd.te
index 0f4e891..2c0fb15 100644
--- a/netd.te
+++ b/netd.te
@@ -18,6 +18,7 @@
 allow netd self:netlink_route_socket nlmsg_write;
 allow netd self:netlink_nflog_socket create_socket_perms;
 allow netd self:netlink_socket create_socket_perms;
+allow netd self:netlink_tcpdiag_socket { create_socket_perms nlmsg_read nlmsg_write };
 allow netd shell_exec:file rx_file_perms;
 allow netd system_file:file x_file_perms;
 allow netd devpts:chr_file rw_file_perms;