mirror of
https://github.com/Evolution-X-Devices/device_google_wahoo
synced 2026-02-01 07:50:47 +00:00
Remove net_raw capability from ims
net_raw was added to make IMS registration work in enforced mode Currently ims is in permissive mode so any denials will not block the functionality or lab testing This change will enable QC to catch denials and fix in their prebuilts Test: Basic telephony sanity Bug: 37652052 Change-Id: I942a267464b83f60ef6274e47f1ae6a493230c1f
This commit is contained in:
3
sepolicy/vendor/ims.te
vendored
3
sepolicy/vendor/ims.te
vendored
@@ -13,8 +13,7 @@ allow ims sysfs_soc:dir search;
|
||||
allow ims sysfs_soc:file r_file_perms;
|
||||
allow ims sysfs_timestamp_switch:file r_file_perms;
|
||||
|
||||
# TODO(b/38228603): Remove net_raw upon resolution of this bug
|
||||
allow ims self:capability { net_raw net_bind_service};
|
||||
allow ims self:capability net_bind_service;
|
||||
|
||||
allow ims ion_device:chr_file r_file_perms;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user