| commit | 5a2b02c0698f7ec83da088ada2ddffe117ce44cf | [log] [tgz] |
|---|---|---|
| author | Stephen Smalley <sds@tycho.nsa.gov> | Wed Jun 11 10:35:42 2014 -0400 |
| committer | Stephen Smalley <sds@tycho.nsa.gov> | Wed Jun 11 10:35:42 2014 -0400 |
| tree | b00ec96df034700bcd459f16e74f56bb2e732325 | |
| parent | d841ede3186d89fc18ac474fe30eeb5224ff41b4 [diff] |
Allow thermald dac_override.
Addresses denials such as:
avc: denied { dac_override } for comm="thermald" capability=1 scontext=u:r:thermald:s0 tcontext=u:r:thermald:s0 tclass=capability
Also add an auditallow rule to track this permission for further analysis.
We already allow this on hammerhead.
Change-Id: I02b15e9725f42d4c9d9f829982a5a00175160af2
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>