Merge "Suppress netutils_wrapper module denials" into oc-dr1-dev

Flohack74 · Jun 23, 2017 · 32f9c61 · 32f9c61
2 parents 30038f8 + 02a94ce
commit 32f9c61
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/sepolicy/vendor/netutils_wrapper.te b/sepolicy/vendor/netutils_wrapper.te
@@ -3,3 +3,5 @@ allow netutils_wrapper netmgrd:fd use;
 allow netutils_wrapper netmgrd:fifo_file { getattr read write append };
 
 dontaudit netutils_wrapper netmgrd:netlink_socket { getattr read write append };
+dontaudit netutils_wrapper kernel:system module_request;
+dontaudit netutils_wrapper self:capability sys_module;