summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2022-08-25 07:42:55 +0000
committerAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2022-08-25 07:42:55 +0000
commit1873033277fb47712d4821288beff62f355810ff (patch)
tree5f0bdf382efc219fc3695c92e553ce718cc81b2e
parent966b2021ba2827d6e397f213cea246a69fd453e6 (diff)
parentf13c09a795718ec8d5b69d1371f144a0ac262e8e (diff)
downloadwembley-sepolicy-gki13-boot-release.tar.gz
Snap for 8992082 from f13c09a795718ec8d5b69d1371f144a0ac262e8e to gki13-boot-releasegki13-boot-release
Change-Id: I2c7b8f86995ea207e8d0cd38745a0d91c1fa3a2a
-rw-r--r--non_plat/mnld.te2
-rw-r--r--non_plat/mtk_agpsd.te2
-rw-r--r--non_plat/mtkrild.te2
-rw-r--r--non_plat/slpd.te2
4 files changed, 7 insertions, 1 deletions
diff --git a/non_plat/mnld.te b/non_plat/mnld.te
index 4625b8e..17bacba 100644
--- a/non_plat/mnld.te
+++ b/non_plat/mnld.te
@@ -109,3 +109,5 @@ allow mnld sysfs_leds:file r_file_perms;
#Add for /nvcfg/almanac.dat
allow mnld nvcfg_file:dir w_dir_perms;
allow mnld nvcfg_file:file create_file_perms;
+
+allow mnld self:netlink_route_socket { bind nlmsg_readpriv nlmsg_getneigh };
diff --git a/non_plat/mtk_agpsd.te b/non_plat/mtk_agpsd.te
index 40abed3..c9488e0 100644
--- a/non_plat/mtk_agpsd.te
+++ b/non_plat/mtk_agpsd.te
@@ -70,3 +70,5 @@ get_prop(mtk_agpsd, vendor_mtk_mnld_prop)
get_prop(mtk_agpsd, vendor_mtk_gps_support_prop)
wakelock_use(mtk_agpsd)
+
+allow mtk_agpsd self:netlink_route_socket { bind nlmsg_readpriv nlmsg_getneigh };
diff --git a/non_plat/mtkrild.te b/non_plat/mtkrild.te
index 677e17f..82cc1e5 100644
--- a/non_plat/mtkrild.te
+++ b/non_plat/mtkrild.te
@@ -53,7 +53,7 @@ allow mtkrild sdcardfs:dir r_dir_perms;
allow mtkrild proc_net:file w_file_perms;
# Set and get routes directly via netlink.
-allow mtkrild self:netlink_route_socket nlmsg_write;
+allow mtkrild self:netlink_route_socket { nlmsg_write bind nlmsg_readpriv nlmsg_getneigh };
# Allow read/write to devices/files
allow mtkrild mtk_radio_device:dir search;
diff --git a/non_plat/slpd.te b/non_plat/slpd.te
index cfce93b..fa3efeb 100644
--- a/non_plat/slpd.te
+++ b/non_plat/slpd.te
@@ -16,3 +16,5 @@ net_domain(slpd)
# mtk_agpsd will send the current SUPL profile to SLPD
allow slpd mtk_agpsd:unix_dgram_socket sendto;
+
+allow slpd self:netlink_route_socket { bind nlmsg_readpriv nlmsg_getneigh };