diff options
| author | Aayush Gupta <aayushgupta219@gmail.com> | 2020-10-20 13:23:41 +0530 |
|---|---|---|
| committer | alk3pInjection <webmaster@raspii.tech> | 2022-01-20 10:28:00 +0800 |
| commit | 12997102c8d04ed4f36a262e12dfd8d2a976ecab (patch) | |
| tree | 820757e4d95b439f0d2125c95467e2f9a4413d27 | |
| parent | 38a1ea30d6bc4016deab7c084e7f4d77ed7e5718 (diff) | |
legacy: Address init denials regarding socket_device
[ 9.346918] type=1400 audit(71454275.960:7): avc: denied { create } for comm="init" name="dpmwrapper" scontext=u:r:init:s0 tcontext=u:object_r:socket_device:s0 tclass=sock_file permissive=0
Ref:
[0]: https://source.codeaurora.org/quic/la/device/qcom/sepolicy/commit/?h=LA.UM.9.2.1.r1-03800-sdm660.0&id=79488292273efa5ab89bc405a5f6ae4dec5d011d
Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: I262b06821c0625978b3685d0666bd2cf599fbf98
| -rw-r--r-- | legacy/vendor/common/init.te | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/legacy/vendor/common/init.te b/legacy/vendor/common/init.te index b8255503..eb111bfe 100644 --- a/legacy/vendor/common/init.te +++ b/legacy/vendor/common/init.te @@ -87,3 +87,5 @@ allow init { #Blocked by neverallow vendor_init { file_type fs_type -init_exec }:file entrypoint; #domain_trans(init, vendor_init_exec, vendor_init); allow init mnt_vendor_file:lnk_file r_file_perms; + +allow init socket_device:sock_file { unlink setattr create }; |