tequilaOS/platform_device_qcom_sepolicy_vndr-sm8450
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sepolicy_vndr: add ssgtzd_opener socket sepolicy

Browse source 
ssgtzd_opener socket file is created to provide service registration
and adding sepolicy to access this socket

Change-Id: I06afa4e9e6857d6f13731eaf46d9acbc5e606224
This commit is contained in:
Arun Kumar Neelakantam 2021-11-15 22:12:11 +05:30
parent 5e19c5be0a
commit 8c8acc41ff
3 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
generic/vendor/common/trusteduilistener.te vendored
View file

@ -44,6 +44,7 @@ hal_client_domain(vendor_trusteduilistener, vendor_hal_systemhelper);
# Allow access to SSGTZD socket
unix_socket_connect(vendor_trusteduilistener, vendor_ssgtzd, vendor_ssgtzd)
allow vendor_trusteduilistener vendor_ssgtzd_opener_socket:sock_file write;
# Allow CPU files
allow vendor_trusteduilistener sysfs_devices_system_cpu:file rw_file_perms;

1
qva/vendor/common/file.te vendored
View file

@ -42,6 +42,7 @@ type vendor_ssgqmig_socket, file_type, mlstrustedobject;
#ssg tz daemon socket
type vendor_ssgtzd_socket, file_type, mlstrustedobject;
type vendor_ssgtzd_opener_socket, file_type, mlstrustedobject;
#spunvm file types
type vendor_spunvm_file, file_type, vendor_spunvm_file_type;

1
qva/vendor/common/file_contexts vendored
View file

@ -94,6 +94,7 @@
/dev/socket/qwes_ipc u:object_r:vendor_qwesd_socket:s0
/dev/socket/ssgqmig u:object_r:vendor_ssgqmig_socket:s0
/dev/socket/ssgtzd u:object_r:vendor_ssgtzd_socket:s0
/dev/socket/ssgtzd_opener u:object_r:vendor_ssgtzd_opener_socket:s0
/dev/socket/adpl_cmd_uds_file u:object_r:vendor_dataadpl_socket:s0
/dev/socket/vendor_wpa_wlan[0-9] u:object_r:vendor_wifi_vendor_wpa_socket:s0
/dev/socket/wigig/wpa_wigig[0-9] u:object_r:vendor_wigig_vendor_wpa_socket:s0