22f18adb26
Bug: 186189967 Test: com.google.android.security.gts.SELinuxHostTest#testNoExemptionsForVendorExecutingCore Change-Id: I277cec72377b647c9af40e32b5582e30e9e3730e
23 lines
753 B
Text
23 lines
753 B
Text
type sced, domain;
|
|
type sced_exec, vendor_file_type, exec_type, file_type;
|
|
init_daemon_domain(sced)
|
|
|
|
userdebug_or_eng(`
|
|
typeattribute sced vendor_executes_system_violators;
|
|
|
|
hwbinder_use(sced)
|
|
binder_call(sced, dmd)
|
|
binder_call(sced, vendor_telephony_app)
|
|
|
|
get_prop(sced, hwservicemanager_prop)
|
|
allow sced self:packet_socket create_socket_perms_no_ioctl;
|
|
|
|
allow sced self:capability net_raw;
|
|
allow sced shell_exec:file rx_file_perms;
|
|
allow sced tcpdump_exec:file rx_file_perms;
|
|
allow sced vendor_shell_exec:file x_file_perms;
|
|
allow sced vendor_slog_file:dir create_dir_perms;
|
|
allow sced vendor_slog_file:file create_file_perms;
|
|
allow sced hidl_base_hwservice:hwservice_manager add;
|
|
allow sced hal_vendor_oem_hwservice:hwservice_manager { add find };
|
|
')
|