Amit Pundir | 7cc6a2d | 2020-04-23 21:39:03 +0530 | [diff] [blame] | 1 | type eth_mac_addr, domain, coredomain; |
| 2 | type eth_mac_addr_exec, exec_type, system_file_type, file_type; |
| 3 | init_daemon_domain(eth_mac_addr); |
| 4 | |
| 5 | allow eth_mac_addr proc_cmdline:file { open read }; |
| 6 | allow eth_mac_addr rootfs:dir { open read }; |
| 7 | allow eth_mac_addr self:capability net_admin; |
| 8 | allow eth_mac_addr self:netlink_route_socket { bind create getattr nlmsg_readpriv nlmsg_write read setopt write }; |
| 9 | allow eth_mac_addr self:udp_socket { create ioctl }; |
| 10 | allow eth_mac_addr shell_exec:file { execute getattr map read }; |
| 11 | allow eth_mac_addr system_file:file execute_no_trans; |
| 12 | allow eth_mac_addr toolbox_exec:file { execute execute_no_trans getattr map open read }; |