diff options
| author | Michael Bestas <mkbestas@lineageos.org> | 2018-05-18 23:21:41 +0300 |
|---|---|---|
| committer | Michael Bestas <mkbestas@lineageos.org> | 2018-05-20 21:57:18 +0300 |
| commit | 3ef5cf88628b926cfc679a60583ffa0029810b28 (patch) | |
| tree | 852019f0ad5f5d7b68588eaab146d73da9c2fbf6 | |
| parent | 731dac564e0b2d5941b59313d541afcc5aef8d1d (diff) | |
| download | android_device_qcom_sepolicy-3ef5cf88628b926cfc679a60583ffa0029810b28.tar.gz android_device_qcom_sepolicy-3ef5cf88628b926cfc679a60583ffa0029810b28.tar.bz2 android_device_qcom_sepolicy-3ef5cf88628b926cfc679a60583ffa0029810b28.zip | |
legacy: Resolve msm8992/4 perfd denials
Change-Id: Ibef3bd2704b8edbefb90085c7c246ab832646300
| -rw-r--r-- | legacy-common/mediacodec.te | 3 | ||||
| -rw-r--r-- | legacy-common/perfd.te | 2 |
2 files changed, 4 insertions, 1 deletions
diff --git a/legacy-common/mediacodec.te b/legacy-common/mediacodec.te index 7753376d..008aa335 100644 --- a/legacy-common/mediacodec.te +++ b/legacy-common/mediacodec.te @@ -2,3 +2,6 @@ allow mediacodec audioserver_service:service_manager find; allow mediacodec mpctl_socket:dir search; +allow mediacodec mpctl_socket:sock_file write; + +allow mediacodec perfd:unix_stream_socket connectto; diff --git a/legacy-common/perfd.te b/legacy-common/perfd.te index 67b05833..c1307a4a 100644 --- a/legacy-common/perfd.te +++ b/legacy-common/perfd.te @@ -3,7 +3,7 @@ type perfd_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(perfd) -allow perfd self:capability fsetid; +allow perfd self:capability { fsetid kill }; allow perfd { sysfs_devices_system_cpu |