tree af422127e590840b7dd3f4c0adb2f4346758c15d
parent 20d6963ac27b3d401922450ce8dcb89749c20404
author hqjiang <hqjiang1988@gmail.com> 1342721224 -0700
committer Stephen Smalley <sds@tycho.nsa.gov> 1342728684 -0400

Target the denials/policies over qtaguid file and device: 1. Relabel /proc/net/xt_qtaguid/ctrl from "qtaguid" to "qtaguid_proc"; 2. Label /dev/xt_qtaguid with "qtaguid_device"; 3. Allow mediaserver read/[write] to qtaguid_proc and qtaguid_device; 4. Allow media apps read/[write] to qtaguid_proc and qtaguid_device; 5. Allow system read/[write] to qtaguid_proc and qtaguid_device.

Actually, some of policies related to qtaguid have been there already, but
we refind existing ones and add new ones.