From a49c51f15a38d27f2bf027329cc0d73e33214427 Mon Sep 17 00:00:00 2001 From: Aayush Gupta Date: Tue, 20 Oct 2020 13:23:41 +0530 Subject: msm8996-common: Address init denials regarding socket_device [ 9.346918] type=1400 audit(71454275.960:7): avc: denied { create } for comm="init" name="dpmwrapper" scontext=u:r:init:s0 tcontext=u:object_r:socket_device:s0 tclass=sock_file permissive=0 Ref: [0]: https://source.codeaurora.org/quic/la/device/qcom/sepolicy/commit/?h=LA.UM.9.2.1.r1-03800-sdm660.0&id=79488292273efa5ab89bc405a5f6ae4dec5d011d Signed-off-by: Aayush Gupta Change-Id: I262b06821c0625978b3685d0666bd2cf599fbf98 --- sepolicy/init.te | 1 + 1 file changed, 1 insertion(+) diff --git a/sepolicy/init.te b/sepolicy/init.te index 68dd5a7..ef5a03f 100644 --- a/sepolicy/init.te +++ b/sepolicy/init.te @@ -4,3 +4,4 @@ allow init sysfs_fingerprint:file { open read setattr write }; allow init hidl_base_hwservice:hwservice_manager add; allow init sysfs_graphics:lnk_file read; allow init adsprpcd_file:filesystem { mount relabelfrom relabelto }; +allow init socket_device:sock_file { unlink setattr create }; -- cgit v1.2.3