aboutsummaryrefslogtreecommitdiffstats
path: root/drmserver.te
diff options
context:
space:
mode:
authorStephen Smalley <sds@tycho.nsa.gov>2014-01-16 12:59:29 -0500
committerStephen Smalley <sds@tycho.nsa.gov>2014-02-04 19:32:39 +0000
commit8cd400d3c4a5a9eb9bd8b0392260200bd23e6548 (patch)
tree957af61f22a97379c0943b5d62285c5382f25ae0 /drmserver.te
parentba1a73156b262806e656b75101349d2e6e16a471 (diff)
downloadandroid_external_sepolicy-8cd400d3c4a5a9eb9bd8b0392260200bd23e6548.tar.gz
android_external_sepolicy-8cd400d3c4a5a9eb9bd8b0392260200bd23e6548.tar.bz2
android_external_sepolicy-8cd400d3c4a5a9eb9bd8b0392260200bd23e6548.zip
Move tlcd_sock policy over to manta.
Change-Id: I7d5a5f964133177e7d466b9759fcf6300fec345d Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'drmserver.te')
-rw-r--r--drmserver.te10
1 files changed, 1 insertions, 9 deletions
diff --git a/drmserver.te b/drmserver.te
index 2fbb661..584fd65 100644
--- a/drmserver.te
+++ b/drmserver.te
@@ -25,16 +25,8 @@ allow drmserver { app_data_file asec_apk_file }:file { read write getattr };
allow drmserver sdcard_type:file { read write getattr };
r_dir_file(drmserver, efs_file)
-type drmserver_socket, file_type;
-
-# /data/app/tlcd_sock socket file.
-# Clearly, /data/app is the most logical place to create a socket. Not.
-allow drmserver apk_data_file:dir rw_dir_perms;
-type_transition drmserver apk_data_file:sock_file drmserver_socket;
-allow drmserver drmserver_socket:sock_file create_file_perms;
+# Connect to tee service.
allow drmserver tee:unix_stream_socket connectto;
-# Delete old socket file if present.
-allow drmserver apk_data_file:sock_file unlink;
# After taking a video, drmserver looks at the video file.
r_dir_file(drmserver, media_rw_data_file)