mirror of
https://github.com/followmsi/android_device_asus_flo.git
synced 2024-11-06 21:56:05 +00:00
165b4ae091
Remove the ioctl permission for most socket types. For others, such as tcp/udp/rawip/unix_dgram/unix_stream set a default unprivileged whitelist that individual domains may extend (except where neverallowed like untrusted_app). Enforce via a neverallowxperm rule. Change-Id: I7573fdb24f9c53ad169bce2aeab1baac8b2a11ea
9 lines
383 B
Text
9 lines
383 B
Text
# Grant access to Qualcomm MSM Interface (QMI) audio sockets to mediaserver
|
|
qmux_socket(mediaserver)
|
|
|
|
unix_socket_send(mediaserver, camera, camera)
|
|
unix_socket_send(mediaserver, mpdecision, mpdecision)
|
|
|
|
# Permit mediaserver to create sockets with no specific SELinux class.
|
|
# TODO: Investigate the specific type of socket.
|
|
allow mediaserver self:socket create_socket_perms_no_ioctl;
|