From cb650b446248c57ad288c182ed3a25f8c9cff6db Mon Sep 17 00:00:00 2001 From: Shirayuki39 Date: Wed, 17 Jul 2024 20:04:10 +0800 Subject: [PATCH] LG8n: sepolicy: Address bip denials 06-28 19:04:00.929 1151 1151 I auditd : type=1400 audit(0.0:59): avc: denied { read } for comm=bip name=u:object_r:net_dns_prop:s0 dev=tmpfs ino=234 scontext=u:r:bip:s0 tcontext=u:object_r:net_dns_prop:s0 tclass=file permissive=0 06-28 19:04:00.913 1 1 I auditd : type=1400 audit(0.0:57): avc: denied { create } for comm=init name=bip_socket scontext=u:r:init:s0 tcontext=u:object_r:socket_device:s0 tclass=sock_file permissive=0 Signed-off-by: Shirayuki39 --- sepolicy/vendor/bip.te | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 sepolicy/vendor/bip.te diff --git a/sepolicy/vendor/bip.te b/sepolicy/vendor/bip.te new file mode 100644 index 0000000..408e7ca --- /dev/null +++ b/sepolicy/vendor/bip.te @@ -0,0 +1,2 @@ +get_prop(bip, net_dns_prop) +allow bip socket_device:sock_file create;