sdm710-common: sepolicy: Allow zygote to access unix_stream_socket

*W FinalizerDaemon: type=1400 audit(0.0:232): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:system_app:s0 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0
*W FinalizerDaemon: type=1400 audit(0.0:355): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:platform_app:s0:c512,c768 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 app=com.motorola.dolby.dolbyui
*W FinalizerDaemon: type=1400 audit(0.0:438): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:priv_app:s0:c512,c768 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 app=com.android.wallpaper
This commit is contained in:
Ultra119 2022-05-07 20:44:12 +03:00 committed by Ultra119
parent a0708391da
commit 954ce897e9
3 changed files with 5 additions and 1 deletions

1
sepolicy/vendor/platform_app.te vendored Normal file
View file

@ -0,0 +1 @@
allow platform_app zygote:unix_stream_socket getopt;

1
sepolicy/vendor/priv_app.te vendored Normal file
View file

@ -0,0 +1 @@
allow priv_app zygote:unix_stream_socket getopt;

View file

@ -1,2 +1,4 @@
# Allow KProfiles to be adjusted by a system app # Allow KProfiles to be adjusted by a system app
allow system_app sysfs_kprofiles:file rw_file_perms; allow system_app sysfs_kprofiles:file rw_file_perms;
allow system_app zygote:unix_stream_socket getopt;