Files
device_google_wahoo/sepolicy/rild.te
Naveen Kalla 7a309b9218 Allow rild permissions to connect to time-daemon
Fix denial below seen when eMBMS app is started

 rild    : type=1400 audit(0.0:4912): avc: denied { connectto } for
 path=0074696D655F67656E6F6666 scontext=u:r:rild:s0
 tcontext=u:r:time_daemon:s0 tclass=unix_stream_socket permissive=0

Bug: 38101466
Test: Open eMBMS app on the device and ensure that Registration
      works.

Change-Id: I3ef51be29032c3a69c6aa1184d89fc320165059d
2017-05-08 15:13:34 -07:00

32 lines
1.0 KiB
Plaintext

# TODO(b/36443535): Remove this once rild stops using Binder
typeattribute rild binder_in_vendor_violators;
binder_use(rild)
binder_call(rild, per_mgr)
binder_call(rild, audioserver)
allow rild qmuxd_socket:dir w_dir_perms;
allow rild qmuxd_socket:sock_file create_file_perms;
allow rild netmgrd_socket:dir search;
unix_socket_connect(rild, netmgrd, netmgrd)
allow rild vendor_file:file { execute_no_trans lock };
allow rild per_mgr_service:service_manager find;
allow rild audioserver_service:service_manager find;
add_hwservice(rild, vnd_ims_radio_hwservice)
add_hwservice(rild, vnd_qcrilhook_hwservice)
allow rild self:socket ioctl;
allowxperm rild self:socket ioctl msm_sock_ipc_ioctls;
allow rild time_daemon:unix_stream_socket connectto;
# TODO(b/36613472): Remove this once system_server, mediaserver, radio, and bluetooth no longer
# communicate with rild over sockets.
typeattribute rild socket_between_core_and_vendor_violators;
userdebug_or_eng(`
domain_auto_trans(rild, smlog_dump_exec, smlog_dump)
')