Merge "ppp: Allow specific ioctls on mtp:socket." am: 11ce09bc

am: e8acb4f6

Change-Id: Iab0ebf0748c4c3dda5a7505050d3f87d5ddf0608

public/ppp.te

@@ -7,7 +7,12 @@ net_domain(ppp)
 
 r_dir_file(ppp, proc_net)
 
-allow ppp mtp:socket rw_socket_perms_no_ioctl;
+allow ppp mtp:socket rw_socket_perms;
+
+# ioctls needed for VPN.
+allowxperm ppp self:udp_socket ioctl priv_sock_ioctls;
+allowxperm ppp mtp:socket ioctl ppp_ioctls;
+
 allow ppp mtp:unix_dgram_socket rw_socket_perms;
 allow ppp ppp_device:chr_file rw_file_perms;
 allow ppp self:capability net_admin;