sepolicy: Add rule for system app with userdebug tag to access QMI IOCTLs
Add rule to access system app with userdebug tag to create socket and access QMI IOCTLs. Change-Id: I219e5402957ae642f60c05de230aa7cec1cc076c
This commit is contained in:
		
							
								
								
									
										8
									
								
								vendor/common/system_app.te
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										8
									
								
								vendor/common/system_app.te
									
									
									
									
										vendored
									
									
								
							@@ -17,6 +17,8 @@ hal_client_domain(system_app, hal_hbtp)
 | 
			
		||||
hal_client_domain(system_app, hal_qdutils_disp);
 | 
			
		||||
hal_client_domain(system_app, hal_tui_comm);
 | 
			
		||||
 | 
			
		||||
#allow system_app access ioctl
 | 
			
		||||
allowxperm system_app self:socket ioctl msm_sock_ipc_ioctls;
 | 
			
		||||
allow system_app self:socket create_socket_perms;
 | 
			
		||||
#allow only system_app with userdebug to access ioctl
 | 
			
		||||
userdebug_or_eng(`
 | 
			
		||||
  allowxperm system_app self:socket ioctl msm_sock_ipc_ioctls;
 | 
			
		||||
  allow system_app self:socket create_socket_perms;
 | 
			
		||||
')
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user