NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03974446] modify vendor_init selinux policy

Browse Source 
[Detail]
vendor_init will parse meta_init.rc to ifup lo,which needs some
selinux policy. when meta mode has enabled loopback, gps tool can
run normally

[Solution]
add selinux rule to up lo interface

MTK-Commit-Id: b351d14a284871dae0783f4d48278a1fde515f4d

Change-Id: I962bfc0002a76d34e5366869cb5fea46ae1453da
CR-Id: ALPS03974446
Feature: Location Chipset Capability
This commit is contained in:
mtk81216 2020-01-18 10:04:54 +08:00 committed by Zhen Jiang
parent 19ccbe6c30
commit b189b5f35a
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
non_plat/vendor_init.te
View File

@ -35,3 +35,11 @@ set_prop(vendor_init, mtk_emmc_support_prop)
allow vendor_init tmpfs:lnk_file create;
set_prop(vendor_init, mtk_cxp_vendor_prop)
# Run "ifup lo" to bring up the localhost interface
allow vendor_init proc_hostname:file w_file_perms;
allow vendor_init self:udp_socket { create ioctl };
# in addition to unpriv ioctls granted to all domains, init also needs:
allowxperm vendor_init self:udp_socket ioctl { SIOCSIFFLAGS };
allow vendor_init self:global_capability_class_set net_raw;