LG8n: sepolicy: Address bip denials

06-28 19:04:00.929  1151  1151 I auditd  : type=1400 audit(0.0:59): avc: denied { read } for comm=bip name=u:object_r:net_dns_prop:s0 dev=tmpfs ino=234 scontext=u:r:bip:s0 tcontext=u:object_r:net_dns_prop:s0 tclass=file permissive=0
06-28 19:04:00.913     1     1 I auditd  : type=1400 audit(0.0:57): avc: denied { create } for comm=init name=bip_socket scontext=u:r:init:s0 tcontext=u:object_r:socket_device:s0 tclass=sock_file permissive=0

Signed-off-by: Shirayuki39 <lorddemecrius83@proton.me>
This commit is contained in:
Shirayuki39 2024-07-17 20:04:10 +08:00
parent 78f4aad150
commit cb650b4462

2
sepolicy/vendor/bip.te vendored Normal file
View file

@ -0,0 +1,2 @@
get_prop(bip, net_dns_prop)
allow bip socket_device:sock_file create;