Sepolicy changes to allow create socket

Allow cnd to create qipcrtr_socket

Denial :

avc: denied { create } for comm="cnd" scontext=u:r:cnd:s0
tcontext=u:r:cnd:s0 tclass=qipcrtr_socket permissive=1

Change-Id: I10885b9af1d362c2d04e5406ce618c0e6f84507f
CRs-Fixed: TBD
This commit is contained in:
Pavan Kumar M 2019-02-18 11:37:31 +05:30 committed by Gerrit - the friendly Code Review server
parent e7994ced68
commit 8324dc3a97

View file

@ -41,11 +41,11 @@ allow cnd wpa_data_file:sock_file create_file_perms;
allow cnd self:capability2 block_suspend; allow cnd self:capability2 block_suspend;
allow cnd self:udp_socket create_socket_perms; allow cnd self:udp_socket create_socket_perms;
allow cnd self:qipcrtr_socket rw_socket_perms_no_ioctl;
allow cnd self:{ allow cnd self:{
# Allow receiving NETLINK responses from WLAN driver. # Allow receiving NETLINK responses from WLAN driver.
netlink_socket netlink_socket
netlink_generic_socket netlink_generic_socket
qipcrtr_socket
} create_socket_perms_no_ioctl; } create_socket_perms_no_ioctl;
allowxperm cnd self:udp_socket ioctl SIOCGIFMTU; allowxperm cnd self:udp_socket ioctl SIOCGIFMTU;