tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Setting up sepolicies for statsd planB of listening to its own socket"

Browse source
This commit is contained in:
android-build-prod (mdb) 2018-05-01 02:20:46 +00:00 committed by Gerrit Code Review
commit 92b6793d11
5 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/compat/26.0/26.0.ignore.cil
View file

@ -90,6 +90,8 @@
statsd
statsd_exec
statsd_tmpfs
statsdw
statsdw_socket
statscompanion_service
storaged_data_file
sysfs_fs_ext4_features

2
private/compat/27.0/27.0.ignore.cil
View file

@ -77,6 +77,8 @@
statsd
statsd_exec
statsd_tmpfs
statsdw
statsdw_socket
storaged_data_file
system_boot_reason_prop
system_update_service

2
private/file.te
View file

@ -4,6 +4,8 @@ type config_gz, fs_type, proc_type;
# /data/misc/stats-data, /data/misc/stats-service
type stats_data_file, file_type, data_file_type, core_data_file_type;
type statsdw_socket, file_type, coredomain_socket, mlstrustedobject;
# /data/misc/storaged
type storaged_data_file, file_type, data_file_type, core_data_file_type;

1
private/file_contexts
View file

@ -133,6 +133,7 @@
/dev/socket/logd u:object_r:logd_socket:s0
/dev/socket/logdr u:object_r:logdr_socket:s0
/dev/socket/logdw u:object_r:logdw_socket:s0
/dev/socket/statsdw u:object_r:statsdw_socket:s0
/dev/socket/mdns u:object_r:mdns_socket:s0
/dev/socket/mdnsd u:object_r:mdnsd_socket:s0
/dev/socket/mtpd u:object_r:mtpd_socket:s0

9
private/statsd.te
View file

@ -1,4 +1,4 @@
type statsd, domain;
type statsd, domain, mlstrustedsubject;
typeattribute statsd coredomain;
init_daemon_domain(statsd)
@ -82,6 +82,13 @@ allow statsd adbd:fd use;
allow statsd adbd:unix_stream_socket { getattr read write };
allow statsd shell:fifo_file { getattr read };
unix_socket_send(bluetooth, statsdw, statsd)
unix_socket_send(bootstat, statsdw, statsd)
unix_socket_send(platform_app, statsdw, statsd)
unix_socket_send(radio, statsdw, statsd)
unix_socket_send(statsd, statsdw, statsd)
unix_socket_send(system_server, statsdw, statsd)
###
### neverallow rules
###