commit 058c4748397cc39861a0bc603faacde7e24ca245
author Stephen Smalley <sds@tycho.nsa.gov> Thu Mar 21 14:11:16 2013 -0700
committer Android Git Automerger <android-git-automerger@android.com> Thu Mar 21 14:11:16 2013 -0700
tree 8160dc2386e0dac608267447bf3814c882a2233e
parent f0221d47f585e899986823b921a19849da6e227a
parent 346cae27813c803d3254871825e64c3805076d04

am 346cae27: bluetooth app requires net_admin for enabling bluetooth.

* commit '346cae27813c803d3254871825e64c3805076d04':
  bluetooth app requires net_admin for enabling bluetooth.

assert.te

diff --git a/assert.te b/assert.te
index 85cb48b..6e43519 100644
--- a/assert.te
+++ b/assert.te
@@ -5,7 +5,8 @@
 
 # Superuser capabilities.
 # Only exception is sys_nice for binder, might not be necessary.
-neverallow appdomain self:capability ~sys_nice;
+neverallow { appdomain -bluetooth } self:capability ~sys_nice;
+neverallow bluetooth self:capability ~{ sys_nice net_admin };
 neverallow appdomain self:capability2 *;
 
 # Block device access.

bluetooth.te

diff --git a/bluetooth.te b/bluetooth.te
index ac7233f..102ee20 100644
--- a/bluetooth.te
+++ b/bluetooth.te
@@ -15,7 +15,7 @@
 
 # sysfs access.
 allow bluetooth sysfs_bluetooth_writable:file rw_file_perms;
-dontaudit bluetooth self:capability net_admin;
+allow bluetooth self:capability net_admin;
 
 # Other domains that can create and use bluetooth sockets.
 # SELinux does not presently define a specific socket class for