commit | 2c75918505a975eb77e286b5379075892ddf1f8c | [log] [tgz] |
---|---|---|
author | Stephen Smalley <sds@tycho.nsa.gov> | Thu Dec 11 11:45:51 2014 -0500 |
committer | Stephen Smalley <sds@tycho.nsa.gov> | Thu Dec 11 11:45:51 2014 -0500 |
tree | 9b93ecb464b873f2ce7e3ffbd84f272afaac75c8 | |
parent | fc6214bf5d571c4d8d364538b8160628dc380c5c [diff] |
Allow fcntl F_SETLK on sockets. Addresses denials such as: type=1400 : avc: denied { lock } for comm="PushCheckSendS" path="socket:[1834573]" dev="sockfs" ino=X scontext=u:r:untrusted_app:s0 tcontext=u:r:untrusted_app:s0 tclass=tcp_socket Change-Id: Idbf6120cca9df634e2f8a876fd1cd836551e5ad7 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>