From 5a8d06b8de2f59fb0a2c3f2cea55f49d13bf22ed Mon Sep 17 00:00:00 2001
From: ahs <amrita.h.s@intel.com>
Date: Fri, 24 Jun 2022 10:29:46 +0530
Subject: [PATCH] Update sepolicy for vsock_socket.

accept and bind permissions are required to
implement guest-host comminication usecases
using gRPC framework.

Tracked-On:
Signed-off-by: ahs <amrita.h.s@intel.com>
---
 clipboard_agent/private/system_app.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/clipboard_agent/private/system_app.te b/clipboard_agent/private/system_app.te
index 4430dc76..e5ad009b 100644
--- a/clipboard_agent/private/system_app.te
+++ b/clipboard_agent/private/system_app.te
@@ -1 +1 @@
-allow system_app self:vsock_socket { create read write connect };
+allow system_app self:vsock_socket { create read write connect accept bind};