Skip to content
Snippets Groups Projects
Commit 9e61f56d authored by Treehugger Robot's avatar Treehugger Robot Committed by Gerrit Code Review
Browse files

Merge "Allow dumpstate to run iotop"

parents 5bb3c603 148674ab
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 3 additions and 0 deletions
public/dumpstate.te
+ 3
− 0
View file @ 9e61f56d
...@@ -250,6 +250,9 @@ binder_call(dumpstate, installd); ...@@ -250,6 +250,9 @@ binder_call(dumpstate, installd);
# Allow dumpstate to run ip xfrm policy # Allow dumpstate to run ip xfrm policy
allow dumpstate self:netlink_xfrm_socket { create_socket_perms_no_ioctl nlmsg_read }; allow dumpstate self:netlink_xfrm_socket { create_socket_perms_no_ioctl nlmsg_read };
# Allow dumpstate to run iotop
allow dumpstate self:netlink_socket create_socket_perms_no_ioctl;
### ###
### neverallow rules ### neverallow rules
### ###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment