diff options
| author | Steve Kondik <steve@cyngn.com> | 2016-08-05 23:18:33 -0700 |
|---|---|---|
| committer | Steve Kondik <steve@cyngn.com> | 2016-08-05 23:18:33 -0700 |
| commit | d805fbcf82e932c519b9a0a79a5995b3f84218fe (patch) | |
| tree | d77a2d37303e81f7f2ddbdf526fe597215ba3aa4 | |
| parent | 091da82baf3452dee661fa35532a7af01fe1b038 (diff) | |
| download | android_device_qcom_sepolicy-d805fbcf82e932c519b9a0a79a5995b3f84218fe.tar.gz android_device_qcom_sepolicy-d805fbcf82e932c519b9a0a79a5995b3f84218fe.tar.bz2 android_device_qcom_sepolicy-d805fbcf82e932c519b9a0a79a5995b3f84218fe.zip | |
sepolicy: Re-add legacy IOP rules
* Still in use for now.
Change-Id: Ieb4c420e73efcb729cc9554de6837ccb71ff603d
| -rw-r--r-- | common/iop.te | 3 | ||||
| -rw-r--r-- | common/system_server.te | 1 |
2 files changed, 3 insertions, 1 deletions
diff --git a/common/iop.te b/common/iop.te index e0a64637..9f7fd712 100644 --- a/common/iop.te +++ b/common/iop.te @@ -39,7 +39,8 @@ r_dir_file( dumpstate, appdomain ); r_dir_file( dumpstate, apk_data_file ); #Create a socket for receiving info from IOP -allow dumpstate iop_socket:sock_file rw_file_perms; +type_transition dumpstate iop_data_file:sock_file iop_socket "iop"; +allow dumpstate iop_socket:sock_file { create_file_perms unlink }; #default_values file allow dumpstate iop_data_file:dir rw_dir_perms; diff --git a/common/system_server.te b/common/system_server.te index 87bfc53c..f933ca94 100644 --- a/common/system_server.te +++ b/common/system_server.te @@ -39,6 +39,7 @@ allow system_server { bluetooth_prop usf_prop }:property_service set; allow system_server bluetooth:unix_stream_socket connectto; # access to iop allow system_server iop_socket:dir r_dir_perms; +allow system_server iop_data_file:dir r_dir_perms; unix_socket_send(system_server, iop, dumpstate) unix_socket_connect(system_server, iop, dumpstate) |