NekoSakura/Android_Device_Mediatek_Sepolicy_Vndr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sepolicy: basic: non_plat: Address Audio HAL tcp_socket neverallow

Browse Source 
* Due to system SEPolicy/audioserver changes in Android 13,
  mtk_hal_audio needs to be allowed to create and use TCP sockets.
Signed-off-by: bengris32 <bengris32@protonmail.ch>

Change-Id: I8d1d0034dfeb64ede815f7c7c7249ee034dd9528
This commit is contained in:
bengris32 2022-08-22 20:49:58 +01:00 committed by Matsvei Niaverau
parent 0f2e6efe70
commit 695d5c0359
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
basic/non_plat/mtk_hal_audio.te
View File

@ -25,8 +25,8 @@ allow mtk_hal_audio audio_device:chr_file rw_file_perms;
neverallow mtk_hal_audio { file_type fs_type }:file execute_no_trans;
# mtk_hal_audio should never need network access.
# Disallow network sockets.
neverallow mtk_hal_audio domain:{ tcp_socket udp_socket rawip_socket } *;
# Disallow network sockets apart from TCP sockets.
neverallow mtk_hal_audio domain:{ udp_socket rawip_socket } *;
# Date : WK14.32
# Operation : Migration