diff --git a/non_plat/file.te b/non_plat/file.te index bec6021..d181064 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -13,6 +13,7 @@ type wpa_supplicant_data_file, file_type, data_file_type; type radvd_data_file, file_type, data_file_type; type volte_vt_socket, file_type; type dfo_socket, file_type; +type gsmrild_socket, file_type; type rild2_socket, file_type; type rild3_socket, file_type; type rild4_socket, file_type; diff --git a/non_plat/file_contexts b/non_plat/file_contexts index 70028c4..a6dd752 100644 --- a/non_plat/file_contexts +++ b/non_plat/file_contexts @@ -263,6 +263,22 @@ /dev/socket/mnld(/.*)? u:object_r:mnld_socket:s0 /dev/socket/netdiag(/.*)? u:object_r:netdiag_socket:s0 /dev/socket/netd(/.*)? u:object_r:netd_socket:s0 +/dev/socket/mrild(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/mrild2(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/mrild3(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/rild-atci u:object_r:gsmrild_socket:s0 +/dev/socket/rild-mbim(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/msap_uim_socket1(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/msap_uim_socket2(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/sap_uim_socket(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/msap_c2k_socket1(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/msap_c2k_socket2(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/msap_c2k_socket3(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/msap_c2k_socket4(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/sap_uim_socket1(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/sap_uim_socket2(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/sap_uim_socket3(/.*)? u:object_r:gsmrild_socket:s0 +/dev/socket/sap_uim_socket4(/.*)? u:object_r:gsmrild_socket:s0 /dev/socket/rild2-md2(/.*)? u:object_r:rild2_md2_socket:s0 /dev/socket/rild2(/.*)? u:object_r:rild2_socket:s0 /dev/socket/rild3(/.*)? u:object_r:rild3_socket:s0 @@ -274,6 +290,8 @@ /dev/socket/rild-ims(/.*)? u:object_r:rild_ims_socket:s0 /dev/socket/volte_imsm_dongle(/.*)? u:object_r:rild_imsm_socket:s0 /dev/socket/rild-vsim(/.*)? u:object_r:rild_vsim_socket:s0 +/dev/socket/rild-vsim2(/.*)? u:object_r:rild_vsim_socket:s0 +/dev/socket/rild-vsim3(/.*)? u:object_r:rild_vsim_socket:s0 /dev/socket/rild-vsim-md2(/.*)? u:object_r:rild_vsim_md2_socket:s0 /dev/socket/rild-ctclient u:object_r:rild_ctclient_socket:s0 /dev/socket/rild-debug-md2(/.*)? u:object_r:rild_debug_md2_socket:s0 @@ -290,6 +308,8 @@ /dev/socket/rild-oem(/.*)? u:object_r:rild_oem_socket:s0 /dev/socket/rild(/.*)? u:object_r:rild_socket:s0 /dev/socket/rild-via u:object_r:rild_via_socket:s0 +/dev/socket/rildc-debug u:object_r:rild_via_socket:s0 +/dev/socket/rild-atci-c2k u:object_r:rild_via_socket:s0 /dev/socket/mal-mfi(/.*)? u:object_r:mal_mfi_socket:s0 /dev/socket/mal-mfi-dongle(/.*)? u:object_r:mal_mfi_socket:s0 /dev/socket/rpc u:object_r:rpc_socket:s0 diff --git a/non_plat/mtkrild.te b/non_plat/mtkrild.te index 3ae7431..06db07e 100644 --- a/non_plat/mtkrild.te +++ b/non_plat/mtkrild.te @@ -94,8 +94,6 @@ allow mtkrild mal_mfi_socket:sock_file { w_file_perms }; allow mtkrild sysfs_ccci:dir search; allow mtkrild sysfs_ccci:file r_file_perms; -allow init socket_device:sock_file { create unlink setattr }; - #For Kryptowire mtklog issue allow mtkrild aee_aedv:unix_stream_socket connectto; # Allow ioctl in order to control network interface diff --git a/non_plat/rilproxy.te b/non_plat/rilproxy.te index 7b8c5d4..5b61287 100644 --- a/non_plat/rilproxy.te +++ b/non_plat/rilproxy.te @@ -72,3 +72,9 @@ set_prop(mtkrild, mtk_ss_vendor_prop) # Purpose: Allow rild access to send SUPL INIT to mnld allow rild mnld:unix_dgram_socket sendto; allow mtkrild mnld:unix_dgram_socket sendto; + +# Date : W19.35 +# Operation: Q migration +# Purpose: Fix rilproxy SeLinux warning of pre-defined socket +allow rild gsmrild_socket:sock_file write; +