sdm710-common: sepolicy: Allow zygote to access unix_stream_socket
*W FinalizerDaemon: type=1400 audit(0.0:232): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:system_app:s0 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 *W FinalizerDaemon: type=1400 audit(0.0:355): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:platform_app:s0:c512,c768 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 app=com.motorola.dolby.dolbyui *W FinalizerDaemon: type=1400 audit(0.0:438): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:priv_app:s0:c512,c768 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 app=com.android.wallpaper
This commit is contained in:
parent
a0708391da
commit
954ce897e9
3 changed files with 5 additions and 1 deletions
1
sepolicy/vendor/platform_app.te
vendored
Normal file
1
sepolicy/vendor/platform_app.te
vendored
Normal file
|
@ -0,0 +1 @@
|
|||
allow platform_app zygote:unix_stream_socket getopt;
|
1
sepolicy/vendor/priv_app.te
vendored
Normal file
1
sepolicy/vendor/priv_app.te
vendored
Normal file
|
@ -0,0 +1 @@
|
|||
allow priv_app zygote:unix_stream_socket getopt;
|
4
sepolicy/vendor/system_app.te
vendored
4
sepolicy/vendor/system_app.te
vendored
|
@ -1,2 +1,4 @@
|
|||
# Allow KProfiles to be adjusted by a system app
|
||||
allow system_app sysfs_kprofiles:file rw_file_perms;
|
||||
allow system_app sysfs_kprofiles:file rw_file_perms;
|
||||
|
||||
allow system_app zygote:unix_stream_socket getopt;
|
||||
|
|
Loading…
Reference in a new issue