From 18410d1a32781dd7ba56f10b36e3defd312924ea Mon Sep 17 00:00:00 2001
From: Sandeep Patil <sspatil@google.com>
Date: Wed, 7 Dec 2016 13:19:30 -0800
Subject: [PATCH] Remove 'net_admin' capability from healthd
Bug: https://b/32733887
Change-Id: Ie22756509b53b6e78a95c5a7763b48773cd52fd7
Signed-off-by: Sandeep Patil <sspatil@google.com>
---
public/healthd.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/public/healthd.te b/public/healthd.te
index 8add56116..fcc5afc40 100644
--- a/public/healthd.te
+++ b/public/healthd.te
@@ -14,7 +14,7 @@ r_dir_file(healthd, cgroup)
# /{system,vendor,odm}/lib[64]/hw/
r_dir_file(healthd, system_file)
-allow healthd self:capability { net_admin sys_tty_config };
+allow healthd self:capability { sys_tty_config };
allow healthd self:capability sys_boot;
allow healthd self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
--
GitLab