From 653e53d11dafc992df6ed020a5d9987b54407ff7 Mon Sep 17 00:00:00 2001 From: Jinhee Kim Date: Fri, 9 Sep 2022 10:15:55 +0900 Subject: [PATCH] sepolicy: gs101: allowed permissions required for network access avc: denied { write } for comm="Thread-102" name="dnsproxyd" dev="tmpfs" ino=1022 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:dnsproxyd_socket:s0 tclass=sock_file permissive=0 app=com.shannon.imsservice avc: denied { node_bind } for comm="Thread-102" src=50174 scontext=u:r:vendor_ims_app:s0:c251,c256,c512,c768 tcontext=u:object_r:node:s0 tclass=udp_socket permissive=0 app=com.shannon.imsservice Bug: 242231557 Test: Build Change-Id: Icc3762cef7f9766d845f1e1a56af1315fc97163b Signed-off-by: Jinhee Kim Signed-off-by: Kukjin Kim --- whitechapel/vendor/google/vendor_ims_app.te | 1 + 1 file changed, 1 insertion(+) diff --git a/whitechapel/vendor/google/vendor_ims_app.te b/whitechapel/vendor/google/vendor_ims_app.te index b990b759..140d9c25 100644 --- a/whitechapel/vendor/google/vendor_ims_app.te +++ b/whitechapel/vendor/google/vendor_ims_app.te @@ -1,5 +1,6 @@ type vendor_ims_app, domain; app_domain(vendor_ims_app) +net_domain(vendor_ims_app) allow vendor_ims_app app_api_service:service_manager find; allow vendor_ims_app audioserver_service:service_manager find;