diff --git a/tracking_denials/lowi_server.te b/tracking_denials/lowi_server.te deleted file mode 100644 index d3c1bd5..0000000 --- a/tracking_denials/lowi_server.te +++ /dev/null @@ -1,2 +0,0 @@ -# b/235281415 -dontaudit lowi_server vendor_location:unix_dgram_socket { read write }; diff --git a/vendor/lowi_server.te b/vendor/lowi_server.te index c1281f9..e107cf2 100644 --- a/vendor/lowi_server.te +++ b/vendor/lowi_server.te @@ -10,7 +10,7 @@ allow lowi_server self:netlink_route_socket create_socket_perms_no_ioctl; ## lowi-server ############## allow lowi_server vendor_location:fd use; -allow lowi_server vendor_location:unix_dgram_socket sendto; +allow lowi_server vendor_location:unix_dgram_socket {sendto read write}; # some additional network access allow lowi_server self:netlink_generic_socket create_socket_perms_no_ioctl;