tequilaOS/platform_device_qcom_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sepolicy: allow netmgrd to access qmipriod properties

Browse source 
Allows netmgr to control starting/stopping the qmipriod daemon via
setting the relevant android properties.

Change-Id: I35d9af93ff565bddc4813eef8ad36db896d4a400
This commit is contained in:
Sean Tranchetti 2020-03-02 18:29:20 -07:00
parent c373d9978c
commit c3e415cb69
3 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
generic/vendor/common/netmgrd.te vendored
View file

@ -41,6 +41,9 @@ allowxperm vendor_netmgrd self:socket ioctl msm_sock_ipc_ioctls;
allowxperm vendor_netmgrd self:udp_socket ioctl priv_sock_ioctls;
allow vendor_netmgrd self:tipc_socket { create_socket_perms_no_ioctl };
#Allow connections to qmipriod
unix_socket_connect(vendor_netmgrd, vendor_netmgrd, vendor_qmipriod);
allow vendor_netmgrd sysfs_net:dir r_dir_perms;
allow vendor_netmgrd sysfs_net:file rw_file_perms;
allow vendor_netmgrd vendor_sysfs_data:file r_file_perms;
@ -74,6 +77,7 @@ allow vendor_netmgrd system_net_netd_hwservice:hwservice_manager find;
# Allow netmgrd to use shsusrd properties
set_prop(vendor_netmgrd, vendor_data_shsusr_prop)
set_prop(vendor_netmgrd, vendor_data_qmipriod_prop)
allow vendor_netmgrd self:capability { net_admin net_raw setgid setpcap setuid };

2
generic/vendor/common/property.te vendored
View file

@ -70,6 +70,8 @@ vendor_restricted_prop(vendor_audio_prop);
# shsusrd props
vendor_restricted_prop(vendor_data_shsusr_prop);
vendor_restricted_prop(vendor_data_qmipriod_prop);
#ss-restart
vendor_internal_prop(vendor_ssr_prop);

1
generic/vendor/common/property_contexts vendored
View file

@ -117,6 +117,7 @@ vendor.debug.egl.profiler u:object_r:vendor_public_vendor_default_prop:s0
# shsusrd loading
persist.vendor.data.shsusr_load u:object_r:vendor_data_shsusr_prop:s0
persist.vendor.data.qmipriod_load u:object_r:vendor_data_qmipriod_prop:s0
#vendor-wlan
vendor.wlan. u:object_r:vendor_wifi_prop:s0