NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

non_plat: Label volte_ism_93 and grant required permissions

Browse Source 
Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: I2ca62b8caed4c7b9e6994e4705df492028ed148d
This commit is contained in:
Aayush Gupta 2021-01-01 11:27:28 +05:30
parent 1e1ffa249d
commit a76a7cc1d2
3 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
non_plat/file_contexts
View File

@ -712,4 +712,5 @@
/(system\/vendor|vendor)/bin/ipsec_mon u:object_r:ipsec_mon_exec:s0
# IMS
/(system\/vendor|vendor)/bin/volte_imsm_93 u:object_r:volte_imsm_93_exec:s0
/(system\/vendor|vendor)/bin/volte_md_status u:object_r:volte_md_status_exec:s0

1
non_plat/property_contexts
View File

@ -377,3 +377,4 @@ ro.mtk_cam_stereo_camera_support u:object_r:mtk_camera_prop:s0
# IMS
vendor.volte_md_status u:object_r:mtk_md_status_prop:s0
vendor.ril.volte. u:object_r:mtk_volte_prop:s0

20
non_plat/volte_imsm_93.te Normal file
View File

@ -0,0 +1,20 @@
type volte_imsm_93, domain, netdomain, mtkimsmddomain;
type volte_imsm_93_exec, exec_type, file_type, vendor_file_type;;
init_daemon_domain(volte_imsm_93)
allow volte_imsm_93 self:capability { chown setgid setuid net_admin };
allow volte_imsm_93 self:udp_socket create_socket_perms;
allow volte_imsm_93 self:netlink_route_socket { create_socket_perms_no_ioctl nlmsg_read nlmsg_write };
allow volte_imsm_93 self:netlink_generic_socket create_socket_perms_no_ioctl;
allow volte_imsm_93 { socket_device property_socket }:sock_file write;
allow volte_imsm_93 { ccci_device devpts }:chr_file rw_file_perms;
allow volte_imsm_93 init:unix_stream_socket connectto;
allow volte_imsm_93 device:dir rw_dir_perms;
allow volte_imsm_93 device:lnk_file { create unlink };
set_prop(volte_imsm_93, usp_prop)
set_prop(volte_imsm_93, ril_mux_report_case_prop)
set_prop(volte_imsm_93, mtk_volte_prop)