commit ff7e5305b87da76735add3444846814958c5d555
author rpcraig <rpcraig@tycho.ncsc.mil> Tue Dec 04 08:09:02 2012 -0500
committer Stephen Smalley <sds@tycho.nsa.gov> Fri Mar 22 15:05:44 2013 -0400
tree 9251acbf390e24bf45e671601201770b35156c6f
parent 4d3f1089aa3c763e4e2c2ccbce2ab23dd700ea48

Create policy for PAN connections.

Policy to allow bluetooth tethering.

Change-Id: Ic24c97b0e1dc93395b8381b78ca4929baa30337c
Signed-off-by: rpcraig <rpcraig@tycho.ncsc.mil>

dhcp.te

diff --git a/dhcp.te b/dhcp.te
index 1cf7af5..0c533eb 100644
--- a/dhcp.te
+++ b/dhcp.te
@@ -22,3 +22,11 @@
 type_transition dhcp system_data_file:{ dir file } dhcp_data_file;
 allow dhcp dhcp_data_file:dir create_dir_perms;
 allow dhcp dhcp_data_file:file create_file_perms;
+
+# PAN connections
+allow dhcp netd:fd use;
+allow dhcp netd:fifo_file rw_file_perms;
+allow dhcp netd:{ dgram_socket_class_set unix_stream_socket } { read write };
+allow dhcp netd:{ netlink_kobject_uevent_socket netlink_route_socket netlink_nflog_socket } { read write };
+# netdev-bt-pan driver loading
+allow dhcp kernel:system module_request;