NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

non_plat: Label volte_ua binary and grant required permissions

Browse Source 
Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: I3681ff0ed7a1de2499b8d53fd5d355cacff3a33a
This commit is contained in:
Aayush Gupta 2021-01-02 12:34:28 +05:30
parent c07ec24c97
commit 23c3e00542
5 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
non_plat/file.te
View File

@ -446,3 +446,6 @@ type camera_vendor_data_file, file_type, data_file_type;
# TEE
type vendor_teei_data_file, file_type, data_file_type;
# IMS
type volte_ua_socket, file_type;

2
non_plat/file_contexts
View File

@ -712,6 +712,8 @@
/(system\/vendor|vendor)/bin/ipsec_mon u:object_r:ipsec_mon_exec:s0
# IMS
/dev/socket/volte_ua(/.*)? u:object_r:volte_ua_socket:s0
/(system\/vendor|vendor)/bin/bip u:object_r:bip_exec:s0
/(system\/vendor|vendor)/bin/volte_imsm_93 u:object_r:volte_imsm_93_exec:s0
/(system\/vendor|vendor)/bin/volte_md_status u:object_r:volte_md_status_exec:s0
/(system\/vendor|vendor)/bin/volte_ua u:object_r:volte_ua_exec:s0

1
non_plat/property.te
View File

@ -338,3 +338,4 @@ type mtk_network_prop, property_type, mtk_core_property_type;
# IMS
type mtk_md_status_prop, property_type;
type ctl_volte_ua_prop, property_type;

1
non_plat/property_contexts
View File

@ -378,3 +378,4 @@ ro.mtk_cam_stereo_camera_support u:object_r:mtk_camera_prop:s0
# IMS
vendor.volte_md_status u:object_r:mtk_md_status_prop:s0
vendor.ril.volte. u:object_r:mtk_volte_prop:s0
ctl.vendor.volte_ua u:object_r:ctl_volte_ua_prop:s0

16
non_plat/volte_ua.te Normal file
View File

@ -0,0 +1,16 @@
type volte_ua, domain, netdomain, mtkimsmddomain;
type volte_ua_exec, exec_type, file_type, vendor_file_type;
init_daemon_domain(volte_ua)
allow volte_ua {
socket_device
volte_ua_socket
netd_socket
}:sock_file write;
allow volte_ua node:udp_socket node_bind;
allow volte_ua self:udp_socket { create bind read setopt };
allow volte_ua self:capability { setgid setuid };
allow volte_ua self:capability2 { wake_alarm };