sepolicy: Add rule for system app with userdebug tag to access QMI IOCTLs
Add rule to access system app with userdebug tag to create socket and access QMI IOCTLs. Change-Id: I219e5402957ae642f60c05de230aa7cec1cc076c
This commit is contained in:
parent
fc274251e1
commit
1478bd6caf
1 changed files with 5 additions and 3 deletions
8
vendor/common/system_app.te
vendored
8
vendor/common/system_app.te
vendored
|
@ -17,6 +17,8 @@ hal_client_domain(system_app, hal_hbtp)
|
|||
hal_client_domain(system_app, hal_qdutils_disp);
|
||||
hal_client_domain(system_app, hal_tui_comm);
|
||||
|
||||
#allow system_app access ioctl
|
||||
allowxperm system_app self:socket ioctl msm_sock_ipc_ioctls;
|
||||
allow system_app self:socket create_socket_perms;
|
||||
#allow only system_app with userdebug to access ioctl
|
||||
userdebug_or_eng(`
|
||||
allowxperm system_app self:socket ioctl msm_sock_ipc_ioctls;
|
||||
allow system_app self:socket create_socket_perms;
|
||||
')
|
||||
|
|
Loading…
Reference in a new issue