[PATCH] binder: add setup_report permission

Li Li <[email protected]> Tue, 15 Apr 2025 00:13:29 -0700
Newsgroups org.kernel.vger.selinux-refpolicy,org.kernel.vger.linux-doc,org.kernel.vger.linux-kernel,org.kernel.vger.netdev,org.kernel.vger.selinux
Message-ID <[email protected]>
From: Li Li <[email protected]>

This adds the new permission "binder:setup_report" for the kernel
patchset "binder: report txn errors via generic netlink". A new test
is also added to selinux-testsuite to cover this new permission.

Signed-off-by: Li Li <[email protected]>
---
 policy/flask/access_vectors | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
index 58a559ca1..36817566e 100644
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@@ -835,6 +835,7 @@ class binder
 	call
 	set_context_mgr
 	transfer
+	setup_report
 }
 
 class netlink_iscsi_socket
-- 
2.49.0.604.gff1f9ca942-goog