OSDN Git Service

goldfish_setup: grant ifconfig priv_sock_ioctls
authorRichard Haines <richard_c_haines@btinternet.com>
Thu, 20 Oct 2016 14:47:44 +0000 (15:47 +0100)
committerRichard Haines <richard_c_haines@btinternet.com>
Thu, 20 Oct 2016 15:46:22 +0000 (16:46 +0100)
commit8a09cc22979490275a34c28f6d2da9407bbcddde
tree27b0baea795501d033a3922f9c25f6719352f9f6
parent92396e17473b13e5f1526d5e1799799e224c20e3
goldfish_setup: grant ifconfig priv_sock_ioctls

The goldfish_setup shell script needs the ability to set the interface
address via ifconfig. This requires SIOCSIFADDR plus other ioctl
permissions, therefore allow the set of priv_sock_ioctls permissions.

Addresses the following denial that stops internet access via browser:
avc: denied { ioctl } for pid=712 comm="ifconfig" path="socket:[1825]"
dev="sockfs" ino=1825 ioctlcmd=8916 scontext=u:r:goldfish_setup:s0
tcontext=u:r:goldfish_setup:s0 tclass=udp_socket permissive=0

Test: With update can access internet via browser.

Change-Id: I77a52c0b72bb0ebe9451f45c346a399c1f61672d
Signed-off-by: Richard Haines <richard_c_haines@btinternet.com>
target/board/generic/sepolicy/goldfish_setup.te