Re: capable(CAP_SYS_MODULE) causes sys_module denial?

2016-07-12 Thread Stephen Smalley
On 07/11/2016 08:51 PM, YongQin Liu wrote: > > > On 11 July 2016 at 23:08, Stephen Smalley > wrote: > > On 07/07/2016 01:11 PM, YongQin Liu wrote: > > Hi, ALL > > > > When I try AOSP master with the hikey board, I see following

Re: capable(CAP_SYS_MODULE) causes sys_module denial?

2016-07-11 Thread Stephen Smalley
On 07/07/2016 01:11 PM, YongQin Liu wrote: > Hi, ALL > > When I try AOSP master with the hikey board, I see following sys_module > denial on netd domain. > > avc: denied { sys_module } for pid=1775 comm="netd" capability=16 > scontext=u:r:netd:s0 tcontext=u:r:netd:s0 tclass=capability

Re: capable(CAP_SYS_MODULE) causes sys_module denial?

2016-07-07 Thread William Roberts
On Jul 7, 2016 1:13 PM, "YongQin Liu" wrote: > > Hi, ALL > > When I try AOSP master with the hikey board, I see following sys_module denial on netd domain. > >> avc: denied { sys_module } for pid=1775 comm="netd" capability=16 scontext=u:r:netd:s0 tcontext=u:r:netd:s0