NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04761137] SeLinux permission

Browse Source 
Add rild socket type.

MTK-Commit-Id: d6850afb4aa38dbb3ec7e439b40a3379edf131a0

Change-Id: I3593adadabeffbe98bacdc27579f392073a40300
CR-Id: ALPS04761137
Feature: DSDS (Dual SIM Dual Standby) Framework-Common Framework(RIL)
This commit is contained in:
Cosmo Sung 2020-01-18 10:19:48 +08:00
parent b42ff07e97
commit 979dff06fc
4 changed files with 27 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
non_plat/file.te
View File

@ -13,6 +13,7 @@ type wpa_supplicant_data_file, file_type, data_file_type;
type radvd_data_file, file_type, data_file_type; type radvd_data_file, file_type, data_file_type;
type volte_vt_socket, file_type; type volte_vt_socket, file_type;
type dfo_socket, file_type; type dfo_socket, file_type;
type gsmrild_socket, file_type;
type rild2_socket, file_type; type rild2_socket, file_type;
type rild3_socket, file_type; type rild3_socket, file_type;
type rild4_socket, file_type; type rild4_socket, file_type;

20
non_plat/file_contexts
View File

@ -263,6 +263,22 @@
/dev/socket/mnld(/.*)? u:object_r:mnld_socket:s0 /dev/socket/mnld(/.*)? u:object_r:mnld_socket:s0
/dev/socket/netdiag(/.*)? u:object_r:netdiag_socket:s0 /dev/socket/netdiag(/.*)? u:object_r:netdiag_socket:s0
/dev/socket/netd(/.*)? u:object_r:netd_socket:s0 /dev/socket/netd(/.*)? u:object_r:netd_socket:s0
/dev/socket/mrild(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/mrild2(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/mrild3(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/rild-atci u:object_r:gsmrild_socket:s0
/dev/socket/rild-mbim(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/msap_uim_socket1(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/msap_uim_socket2(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/sap_uim_socket(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/msap_c2k_socket1(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/msap_c2k_socket2(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/msap_c2k_socket3(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/msap_c2k_socket4(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/sap_uim_socket1(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/sap_uim_socket2(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/sap_uim_socket3(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/sap_uim_socket4(/.*)? u:object_r:gsmrild_socket:s0
/dev/socket/rild2-md2(/.*)? u:object_r:rild2_md2_socket:s0 /dev/socket/rild2-md2(/.*)? u:object_r:rild2_md2_socket:s0
/dev/socket/rild2(/.*)? u:object_r:rild2_socket:s0 /dev/socket/rild2(/.*)? u:object_r:rild2_socket:s0
/dev/socket/rild3(/.*)? u:object_r:rild3_socket:s0 /dev/socket/rild3(/.*)? u:object_r:rild3_socket:s0
@ -274,6 +290,8 @@
/dev/socket/rild-ims(/.*)? u:object_r:rild_ims_socket:s0 /dev/socket/rild-ims(/.*)? u:object_r:rild_ims_socket:s0
/dev/socket/volte_imsm_dongle(/.*)? u:object_r:rild_imsm_socket:s0 /dev/socket/volte_imsm_dongle(/.*)? u:object_r:rild_imsm_socket:s0
/dev/socket/rild-vsim(/.*)? u:object_r:rild_vsim_socket:s0 /dev/socket/rild-vsim(/.*)? u:object_r:rild_vsim_socket:s0
/dev/socket/rild-vsim2(/.*)? u:object_r:rild_vsim_socket:s0
/dev/socket/rild-vsim3(/.*)? u:object_r:rild_vsim_socket:s0
/dev/socket/rild-vsim-md2(/.*)? u:object_r:rild_vsim_md2_socket:s0 /dev/socket/rild-vsim-md2(/.*)? u:object_r:rild_vsim_md2_socket:s0
/dev/socket/rild-ctclient u:object_r:rild_ctclient_socket:s0 /dev/socket/rild-ctclient u:object_r:rild_ctclient_socket:s0
/dev/socket/rild-debug-md2(/.*)? u:object_r:rild_debug_md2_socket:s0 /dev/socket/rild-debug-md2(/.*)? u:object_r:rild_debug_md2_socket:s0
@ -290,6 +308,8 @@
/dev/socket/rild-oem(/.*)? u:object_r:rild_oem_socket:s0 /dev/socket/rild-oem(/.*)? u:object_r:rild_oem_socket:s0
/dev/socket/rild(/.*)? u:object_r:rild_socket:s0 /dev/socket/rild(/.*)? u:object_r:rild_socket:s0
/dev/socket/rild-via u:object_r:rild_via_socket:s0 /dev/socket/rild-via u:object_r:rild_via_socket:s0
/dev/socket/rildc-debug u:object_r:rild_via_socket:s0
/dev/socket/rild-atci-c2k u:object_r:rild_via_socket:s0
/dev/socket/mal-mfi(/.*)? u:object_r:mal_mfi_socket:s0 /dev/socket/mal-mfi(/.*)? u:object_r:mal_mfi_socket:s0
/dev/socket/mal-mfi-dongle(/.*)? u:object_r:mal_mfi_socket:s0 /dev/socket/mal-mfi-dongle(/.*)? u:object_r:mal_mfi_socket:s0
/dev/socket/rpc u:object_r:rpc_socket:s0 /dev/socket/rpc u:object_r:rpc_socket:s0

2
non_plat/mtkrild.te
View File

@ -94,8 +94,6 @@ allow mtkrild mal_mfi_socket:sock_file { w_file_perms };
allow mtkrild sysfs_ccci:dir search; allow mtkrild sysfs_ccci:dir search;
allow mtkrild sysfs_ccci:file r_file_perms; allow mtkrild sysfs_ccci:file r_file_perms;
allow init socket_device:sock_file { create unlink setattr };
#For Kryptowire mtklog issue #For Kryptowire mtklog issue
allow mtkrild aee_aedv:unix_stream_socket connectto; allow mtkrild aee_aedv:unix_stream_socket connectto;
# Allow ioctl in order to control network interface # Allow ioctl in order to control network interface

6
non_plat/rilproxy.te
View File

@ -72,3 +72,9 @@ set_prop(mtkrild, mtk_ss_vendor_prop)
# Purpose: Allow rild access to send SUPL INIT to mnld # Purpose: Allow rild access to send SUPL INIT to mnld
allow rild mnld:unix_dgram_socket sendto; allow rild mnld:unix_dgram_socket sendto;
allow mtkrild mnld:unix_dgram_socket sendto; allow mtkrild mnld:unix_dgram_socket sendto;
# Date : W19.35
# Operation: Q migration
# Purpose: Fix rilproxy SeLinux warning of pre-defined socket
allow rild gsmrild_socket:sock_file write;