NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04843717] Revise SE Linux policy

Browse Source 
Revise SE Linux policy, avoid using socket_device.

MTK-Commit-Id: 93924c0432a94d66682827dd9e5ee9020f10decb

Change-Id: Iad72e8ff6144be73d32c3d27bd31b830900d07a3
CR-Id: ALPS04843717
Feature: [Module]ATCI (AT Command Interface)
This commit is contained in:
Wei Fu 2020-01-18 10:21:33 +08:00 committed by Wei Fu (付威)
parent 222d04459c
commit 31121b1e5d
3 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
non_plat/atcid.te
View File

@ -11,7 +11,6 @@ type atcid_exec, exec_type, file_type, vendor_file_type;
init_daemon_domain(atcid)
set_prop(atcid,persist_service_atci_prop)
allow atcid block_device:dir search;
allow atcid socket_device:sock_file write;
allow atcid gsmrild_socket:sock_file write;
# Date : WK17.21
@ -72,3 +71,9 @@ allow atcid sysfs_mmcblk:file { read open };
unix_socket_connect(atcid, rild_atci, rild);
unix_socket_connect(atcid, rilproxy_atci, rild);
unix_socket_connect(atcid, atci_service, atci_service);
# Date : WK19.42
# Purpose: Add policy to access ATCI sockets
unix_socket_connect(atcid, atci-audio, audiocmdservice_atci);
unix_socket_connect(atcid, meta_atci, meta_tst);
allow atcid adb_atci_socket:sock_file write;

3
non_plat/file.te
View File

@ -332,6 +332,9 @@ type sysfs_headset, fs_type, sysfs_type;
# socket between atci_service and audio-daemon
type atci-audio_socket, file_type;
# socket between atcid and meta_tst
type meta_atci_socket, file_type;
# ATCI socket types
type rild_atci_socket, file_type;
type rilproxy_atci_socket, file_type;

1
non_plat/file_contexts
View File

@ -254,6 +254,7 @@
/dev/socket/agpsd3(/.*)? u:object_r:agpsd_socket:s0
/dev/socket/agpsd(/.*)? u:object_r:agpsd_socket:s0
/dev/socket/atci-audio(/.*)? u:object_r:atci-audio_socket:s0
/dev/socket/meta-atci(/.*)? u:object_r:meta_atci_socket:s0
/dev/socket/backuprestore(/.*)? u:object_r:backuprestore_socket:s0
/dev/socket/dfo(/.*)? u:object_r:dfo_socket:s0
/dev/socket/dnsproxyd(/.*)? u:object_r:dnsproxyd_socket:s0