commit | d7af45d3741648c45560797a5b6f02dec784668f | [log] [tgz] |
---|---|---|
author | Nick Kralevich <nnk@google.com> | Fri Jun 06 16:51:11 2014 -0700 |
committer | Nick Kralevich <nnk@google.com> | Fri Jun 06 16:51:11 2014 -0700 |
tree | cc131366b2e92d48dda58c7524c7006575bdebe2 | |
parent | 90cb59fd513441622323c77762a96df6a85a7100 [diff] |
add attach_queue to tun_socket Modeled after http://oss.tresys.com/pipermail/refpolicy/2013-January/006283.html Addresses the following kernel error message: <6>[ 3.855423] SELinux: Permission attach_queue in class tun_socket not defined in policy. <6>[ 3.862482] SELinux: the above unknown classes and permissions will be denied <7>[ 3.869668] SELinux: Completing initialization. Change-Id: Iad87fcd5348d121a808dbe7ae3c63f8c90fc09fc
diff --git a/access_vectors b/access_vectors index ff631f5..2655872 100644 --- a/access_vectors +++ b/access_vectors
@@ -829,6 +829,9 @@ class tun_socket inherits socket +{ + attach_queue +} class x_pointer inherits x_device