From 3351122ec81cf5097a2dbc4fcd19f11590883222 Mon Sep 17 00:00:00 2001 From: Nick Kralevich <nnk@google.com> Date: Thu, 14 Jan 2016 21:26:42 -0800 Subject: [PATCH] netd.te: Remove allow netd toolbox_exec:file rx_file_perms; no SELinux denials from auditallow Change-Id: Ied61f7f97b148b1c10d0f71e9ab30c136a123738 --- netd.te | 3 --- 1 file changed, 3 deletions(-) diff --git a/netd.te b/netd.te index 564e91ec0..0f4e89194 100644 --- a/netd.te +++ b/netd.te @@ -20,9 +20,6 @@ allow netd self:netlink_nflog_socket create_socket_perms; allow netd self:netlink_socket create_socket_perms; allow netd shell_exec:file rx_file_perms; allow netd system_file:file x_file_perms; -# XXX Run toolbox. Might not be needed. -allow netd toolbox_exec:file rx_file_perms; -auditallow netd toolbox_exec:file rx_file_perms; allow netd devpts:chr_file rw_file_perms; # For /proc/sys/net/ipv[46]/route/flush. -- GitLab