data: Change binary location to netutils
Generic system partition binaries are no accessible on latest versions of AOSP. As a result, use the netutils wrapper equivalents of ip[6]tables, ip and tc. Fix the following denials - type=1400 audit(1495499715.886:76): avc: denied { use } for pid=1370 comm="tc-wrapper-1.0" path="pipe:[28029]" dev="pipefs" ino=28029 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0 tclass=fd permissive=0 type=1400 audit(159.269:260): avc: denied { write } for pid=1612 comm="ndc-wrapper-1.0" path="pipe:[30233]" dev="pipefs" ino=30233 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0 tclass=fifo_file permissive=0 type=1400 audit(159.269:267): avc: denied { read } for pid=1612 comm="ndc-wrapper-1.0" path="pipe:[30809]" dev="pipefs" ino=30809 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0 tclass=fifo_file permissive=0 type=1400 audit(159.269:264): avc: denied { read write } for pid=1612 comm="ndc-wrapper-1.0" path="socket:[20840]" dev="sockfs" ino=20840 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0 tclass=netlink_route_socket permissive=0 type=1400 audit(1495838461.725:623): avc: denied { read write } for pid=3440 comm="ip6tables-wrapp" path="socket:[30928]" dev="sockfs" ino=30928 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0 tclass=unix_stream_socket permissive=0 type=1400 audit(1495845281.873:156): avc: denied { read write } for pid=1436 comm="ip6tables-wrapp" path="socket:[30179]" dev="sockfs" ino=30179 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0 tclass=netlink_generic_socket permissive=0 type=1400 audit(1495845281.873:157): avc: denied { read write } for pid=1436 comm="ip6tables-wrapp" path="socket:[30180]" dev="sockfs" ino=30180 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0 tclass=netlink_xfrm_socket permissive=0 type=1400 audit(10632.149:134): avc: denied { read write } for pid=1523 comm="ndc-wrapper-1.0" path="socket:[28342]" dev="sockfs" ino=28342 scontext=u:r:netutils_wrapper:s0 tcontext=u:r:netmgrd:s0 tclass=udp_socket permissive=0 CRs-Fixed: 2054108 Change-Id: I238f1373777936654844a74a2a3926a11d87a70d
Loading
Please sign in to comment