Merge "Allow all domains to read from socket_device directory."

6f4c3ed6 · Nick Kralevich · Gerrit Code Review · 2a8be3c1 · 20feb75b · 6f4c3ed6
Commit 6f4c3ed6 authored 11 years ago by Nick Kralevich Committed by Gerrit Code Review 11 years ago
--- a/domain.te
+++ b/domain.te
@@ -61,7 +61,7 @@ allow domain device:dir search;
 allow domain dev_type:lnk_file r_file_perms;
 allow domain devpts:dir search;
 allow domain device:file read;
-allow domain socket_device:dir search;
+allow domain socket_device:dir r_dir_perms;
 allow domain owntty_device:chr_file rw_file_perms;
 allow domain null_device:chr_file rw_file_perms;
 allow domain zero_device:chr_file r_file_perms;