flo: sepolicy: system_server: whitelist MSM ipc router ioctls

avc: denied { ioctl } for pid=3112 path="socket:[29649]" dev="sockfs" ino=29649 ioctlcmd=c302 scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0 tclass=socket
avc: denied { ioctl } for pid=3112 path="socket:[29647]" dev="sockfs" ino=29647 ioctlcmd=c304 scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0 tclass=socket

Change-Id: I5018a24464b1160a496e6782284dc8a844b8a114
This commit is contained in:
Jeff Vander Stoep 2016-09-19 14:20:47 -07:00 committed by Artem Borisov
parent 9591753a96
commit 84a9fe6906
1 changed files with 4 additions and 0 deletions

View File

@ -20,3 +20,7 @@ allow system_server sensors_data_file:file r_file_perms;
allow system_server persist_file:dir r_dir_perms;
allow system_server sensors_device:chr_file rw_file_perms;
# use MSM ipc router ioctls
allow system_server self:socket ioctl;
allowxperm system_server self:socket ioctl msm_sock_ipc_ioctls;