| commit | 91ffd84c455a02cd2e482e506207dfc9bc6ca0df | [log] [tgz] |
|---|---|---|
| author | Ravi Kumar Siddojigari <rsiddoji@codeaurora.org> | Wed Oct 15 17:38:15 2014 +0530 |
| committer | Avijit Kanti Das <avijitnsec@codeaurora.org> | Fri Oct 17 11:42:06 2014 -0700 |
| tree | c552407f9f003df807da0f8f4860b014583f1a27 | |
| parent | 7c472af57a56bee3f50120c089776969215d4dea [diff] |
sepolicy : added allow rule for netd to raise module_request this is need for ipt_TCPMSS sort of module Change-Id: Iea379999eff021a2b5a6268d49051661c755246e
diff --git a/common/netd.te b/common/netd.te index 3b480ef..cfdc509 100644 --- a/common/netd.te +++ b/common/netd.te
@@ -3,3 +3,6 @@ allow netd netd:packet_socket { create bind setopt read ioctl }; dontaudit netd self:capability sys_module; + +#needed for ipt_TCPMSS and ip6t_TCPMSS +allow netd kernel:system module_request;