summaryrefslogtreecommitdiffstats
path: root/selinux
diff options
context:
space:
mode:
authorsbrissen <sbrissen@hotmail.com>2015-03-24 14:13:08 -0400
committersbrissen <sbrissen@hotmail.com>2015-03-27 08:13:07 -0400
commit38559b9c2d1de42243bd30d144ff81edeb28a86b (patch)
tree73b8100c43bcfa81f5bd263d24b38207c87ff2bb /selinux
parentbf6b2302dc4ab79c382377b5a4a00c7e800c1470 (diff)
downloaddevice_samsung_t0lte-38559b9c2d1de42243bd30d144ff81edeb28a86b.tar.gz
device_samsung_t0lte-38559b9c2d1de42243bd30d144ff81edeb28a86b.tar.bz2
device_samsung_t0lte-38559b9c2d1de42243bd30d144ff81edeb28a86b.zip
t0lte: updates for KK ril
Change-Id: I38444fd7b48db422ce4c4cc984ac0e88b6d00ea3
Diffstat (limited to 'selinux')
-rw-r--r--selinux/file_contexts1
-rw-r--r--selinux/qmuxd.te1
-rw-r--r--selinux/radio.te4
-rwxr-xr-xselinux/rild.te1
-rw-r--r--selinux/secril.te3
5 files changed, 8 insertions, 2 deletions
diff --git a/selinux/file_contexts b/selinux/file_contexts
index c20f3bd..c42fa2c 100644
--- a/selinux/file_contexts
+++ b/selinux/file_contexts
@@ -62,7 +62,6 @@
/system/bin/efsks u:object_r:kickstart_exec:s0
/system/bin/ks u:object_r:kickstart_exec:s0
/system/bin/qcks u:object_r:kickstart_exec:s0
-/system/bin/sec-ril u:object_r:secril-daemon_exec:s0
# Sockets
/dev/socket/qmux_audio(/.*)? u:object_r:qmuxd_socket:s0
diff --git a/selinux/qmuxd.te b/selinux/qmuxd.te
index 12413a7..da255f2 100644
--- a/selinux/qmuxd.te
+++ b/selinux/qmuxd.te
@@ -33,6 +33,7 @@ allow qmuxd sysfs_wake_lock:file { append open };
#Allow qmuxd to write in hsic specific transport
allow qmuxd sysfs:file w_file_perms;
+allow qmuxd radio_device:file w_file_perms;
allow qmuxd self:capability { setuid setgid setpcap dac_override };
diff --git a/selinux/radio.te b/selinux/radio.te
index da639c5..6dc99b0 100644
--- a/selinux/radio.te
+++ b/selinux/radio.te
@@ -1,2 +1,4 @@
# Talk to qmuxd (/dev/socket/qmux_radio)
-qmux_socket(radio) ; \ No newline at end of file
+qmux_socket(radio) ;
+
+allow radio secril-daemon:unix_stream_socket { connectto }; \ No newline at end of file
diff --git a/selinux/rild.te b/selinux/rild.te
index 96d30df..7b6dd21 100755
--- a/selinux/rild.te
+++ b/selinux/rild.te
@@ -25,3 +25,4 @@ allow rild system_data_file:file create_file_perms;
allow rild rild:process execmem;
allow rild diagnostic_device:chr_file { read write open };
allow rild radio_data_file:dir { setattr };
+allow rild init:unix_stream_socket { read write };
diff --git a/selinux/secril.te b/selinux/secril.te
index f6fa610..1b1cc0a 100644
--- a/selinux/secril.te
+++ b/selinux/secril.te
@@ -32,4 +32,7 @@ allow secril-daemon unlabeled:file { read open getattr setattr };
#allow secril-daemon system_file:file { entrypoint };
allow secril-daemon radio_data_file:dir { search write add_name read open remove_name };
allow secril-daemon efs_file:dir { search };
+allow secril-daemon rild_exec:file { entrypoint read };
+allow secril-daemon qmuxd_socket:dir { write add_name remove_name search };
+allow secril-daemon qmuxd_socket:sock_file { create setattr unlink };