diff --git a/non_plat/atcid.te b/non_plat/atcid.te index 9ce98d2..12ea05c 100644 --- a/non_plat/atcid.te +++ b/non_plat/atcid.te @@ -11,7 +11,6 @@ type atcid_exec, exec_type, file_type, vendor_file_type; init_daemon_domain(atcid) set_prop(atcid,persist_service_atci_prop) allow atcid block_device:dir search; -allow atcid socket_device:sock_file write; allow atcid gsmrild_socket:sock_file write; # Date : WK17.21 @@ -72,3 +71,9 @@ allow atcid sysfs_mmcblk:file { read open }; unix_socket_connect(atcid, rild_atci, rild); unix_socket_connect(atcid, rilproxy_atci, rild); unix_socket_connect(atcid, atci_service, atci_service); + +# Date : WK19.42 +# Purpose: Add policy to access ATCI sockets +unix_socket_connect(atcid, atci-audio, audiocmdservice_atci); +unix_socket_connect(atcid, meta_atci, meta_tst); +allow atcid adb_atci_socket:sock_file write; diff --git a/non_plat/file.te b/non_plat/file.te index 2b13fb0..411f14f 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -332,6 +332,9 @@ type sysfs_headset, fs_type, sysfs_type; # socket between atci_service and audio-daemon type atci-audio_socket, file_type; +# socket between atcid and meta_tst +type meta_atci_socket, file_type; + # ATCI socket types type rild_atci_socket, file_type; type rilproxy_atci_socket, file_type; diff --git a/non_plat/file_contexts b/non_plat/file_contexts index d28bb50..f0b7124 100644 --- a/non_plat/file_contexts +++ b/non_plat/file_contexts @@ -254,6 +254,7 @@ /dev/socket/agpsd3(/.*)? u:object_r:agpsd_socket:s0 /dev/socket/agpsd(/.*)? u:object_r:agpsd_socket:s0 /dev/socket/atci-audio(/.*)? u:object_r:atci-audio_socket:s0 +/dev/socket/meta-atci(/.*)? u:object_r:meta_atci_socket:s0 /dev/socket/backuprestore(/.*)? u:object_r:backuprestore_socket:s0 /dev/socket/dfo(/.*)? u:object_r:dfo_socket:s0 /dev/socket/dnsproxyd(/.*)? u:object_r:dnsproxyd_socket:s0