Skip to content
Snippets Groups Projects
Commit 5f409cbc authored by Thiébaud Weksteen's avatar Thiébaud Weksteen Committed by Greg Kroah-Hartman
Browse files

ANDROID: selinux: modify RTM_GETNEIGH{TBL}


Map the permission gating RTM_GETNEIGH/RTM_GETNEIGHTBL messages to a
new permission so that it can be distinguished from the other netlink
route permissions in selinux policy. The new permission is triggered by
a flag set in system images T and up.

While the kernel supports the new nlmsg extended permission, the policy
does not yet contain the new rules. Keep the support for the
Android-specific policy until the new policy lands.

Bug: 392913234
Bug: 353255679
Test: atest CtsSelinuxTargetSdk25TestCases
Test: atest CtsSelinuxTargetSdk27TestCases
Test: atest CtsSelinuxTargetSdk28TestCases
Test: atest CtsSelinuxTargetSdk29TestCases
Test: atest CtsSelinuxTargetSdk30TestCases
Test: atest CtsSelinuxTargetSdkCurrentTestCases
Signed-off-by: default avatarBram Bonné <brambonne@google.com>
Signed-off-by: default avatarThiébaud Weksteen <tweek@google.com>
Change-Id: I8b34841d7afc97ec1db5dc01444fa26eb68a6e4b
parent b4563881
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment