- Inherit KProfiles. - Address sepolicy. - Define sysfs_kprofiles as a domain. - Fix permission of nodes relevant to KProfiles at boot. Signed-off-by: Cyber Knight <cyberknight755@gmail.com>
6 lines
279 B
Text
6 lines
279 B
Text
allow init self:netlink_route_socket rw_socket_perms_no_ioctl;
|
|
allow init self:rawip_socket create_socket_perms_no_ioctl;
|
|
allow init socket_device:sock_file { unlink setattr create };
|
|
|
|
# Allow init to set attribute to sysfs_kprofiles
|
|
allow init sysfs_kprofiles:file { setattr };
|