gs201: update selinux to allow UMI on user build

Bug: 375335464

[   68.189198] type=1400 audit(1722986580.568:59): avc:  denied  { unlink } for  comm="binder:892_2" name="modem_svc_socket" dev="dm-52" ino=20239 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1
[   68.189448] type=1400 audit(1722986580.568:60): avc:  denied  { create } for  comm="binder:892_2" name="modem_svc_socket" scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1
[   68.189448] type=1400 audit(1722986580.568:60): avc:  denied  { write } for  comm="binder:892_2" name="modem_svc_socket" scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:radio_vendor_data_file:s0 tclass=sock_file permissive=1

Flag: EXEMPT Critical modem system service
Change-Id: Id344d2e7537710461c6b3ca3e2b9f2489d695882
This commit is contained in:
Xiaofan Jiang 2025-01-10 03:15:16 +00:00
parent a2bd3ad6ce
commit 68280fd949

View file

@ -52,6 +52,4 @@ allow modem_svc_sit modem_img_file:file r_file_perms;
allow modem_svc_sit modem_img_file:lnk_file r_file_perms; allow modem_svc_sit modem_img_file:lnk_file r_file_perms;
# Allow modem_svc_sit to access socket for UMI # Allow modem_svc_sit to access socket for UMI
userdebug_or_eng(` allow modem_svc_sit radio_vendor_data_file:sock_file { create unlink write };
allow modem_svc_sit radio_vendor_data_file:sock_file { create unlink };
')