Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 36d91b53 authored by Nick Kralevich's avatar Nick Kralevich Committed by Gerrit Code Review
Browse files

Merge "Only allow toolbox exec where /system exec was already allowed."

parents a7eaf450 75770de7
Loading
Loading
Loading
Loading
+1 −0
Original line number Diff line number Diff line
@@ -9,6 +9,7 @@ allow goldfish_setup shell_exec:file read;

# Run ifconfig, route commands to configure interfaces and routes.
allow goldfish_setup system_file:file execute_no_trans;
allow goldfish_setup toolbox_exec:file rx_file_perms;
allow goldfish_setup self:capability { net_admin net_raw };
allow goldfish_setup self:udp_socket create_socket_perms;