sepolicy: Add rule for system app with userdebug tag to access QMI IOCTLs

Add rule to access system app with userdebug tag to create socket and
access QMI IOCTLs.

Change-Id: I219e5402957ae642f60c05de230aa7cec1cc076c
This commit is contained in:
Shaikh Shadul 2018-04-20 15:37:57 +05:30
parent fc274251e1
commit 1478bd6caf

View file

@ -17,6 +17,8 @@ hal_client_domain(system_app, hal_hbtp)
hal_client_domain(system_app, hal_qdutils_disp);
hal_client_domain(system_app, hal_tui_comm);
#allow system_app access ioctl
allowxperm system_app self:socket ioctl msm_sock_ipc_ioctls;
allow system_app self:socket create_socket_perms;
#allow only system_app with userdebug to access ioctl
userdebug_or_eng(`
allowxperm system_app self:socket ioctl msm_sock_ipc_ioctls;
allow system_app self:socket create_socket_perms;
')