sepolicy: Allow dnscrypt-iptables to read sysfs

dnscrypt-iptables needs to determine if ipv6 is enabled
syphyr · Jan 2, 2023 · 9717a0f · 9717a0f
1 parent 20af525
commit 9717a0f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/dnscrypt_proxy.te b/dnscrypt_proxy.te
@@ -35,4 +35,5 @@ allow dnscrypt_proxy rootfs:dir { read open };
 allow dnscrypt_proxy dnsproxyd_socket:sock_file write;
 allow dnscrypt_proxy init:unix_stream_socket connectto;
 allow dnscrypt_proxy netd:unix_stream_socket connectto;
+allow dnscrypt_proxy sysfs:file { read open };
 set_prop(dnscrypt_proxy, system_prop)