Add module_load permission to system class

jeffvanderstoep · jeffvanderstoep · commit 6d77d852ea23 · 2016-04-07T12:48:10.000-07:00
(cherry picked from AOSP a16b05892a9e9ed949c2cf22147e206e5c0b296e)

Enforce restrictions on kernel module origin when kernel has commit:
61d612ea selinux: restrict kernel module loading

Bug: 27824855
Change-Id: Icf2fefec4231f3df8f0f3d914123c22084d87b0b
diff --git a/access_vectors b/access_vectors
@@ -352,6 +352,7 @@ class system
 	syslog_mod
 	syslog_console
 	module_request
+	module_load
 }
 
 #

Original file line number	Diff line number	Diff line change
`@@ -352,6 +352,7 @@ class system`
`352`	`352`	`syslog_mod`
`353`	`353`	`syslog_console`
`354`	`354`	`module_request`
	`355`	`+ module_load`
`355`	`356`	`}`
`356`	`357`
`357`	`358`	`#`