From 57c23d4e7ccd022598cb03fb495f4842598a0f8b Mon Sep 17 00:00:00 2001 From: Adam Serbinski Date: Sun, 26 May 2019 10:43:57 -0400 Subject: Android HAL/sepolicy: maintenance AOSP's sepolicy changed a little, adjust to it. Signed-off-by: Gary E. Miller --- android/sepolicy/gpsd.te | 3 ++- android/sepolicy/hal_gnss.te | 1 + 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/android/sepolicy/gpsd.te b/android/sepolicy/gpsd.te index 518b6166..877e9589 100644 --- a/android/sepolicy/gpsd.te +++ b/android/sepolicy/gpsd.te @@ -5,7 +5,7 @@ init_daemon_domain(gpsd) net_domain(gpsd) allow gpsd gpsd:capability { net_raw }; -allow gpsd console_device:chr_file rw_file_perms; +allow gpsd serial_device:chr_file rw_file_perms; # The following are needed by logwrapper to get gpsd's output # to Android's logs. @@ -14,3 +14,4 @@ allow gpsd shell_exec:file { execute execute_no_trans read open getattr }; allow gpsd vendor_file:file { execute execute_no_trans read open getattr }; allow gpsd devpts:chr_file { read write open getattr }; allow gpsd gpsd_exec:file { execute execute_no_trans read open getattr }; +allow gpsd vendor_shell_exec:file { execute execute_no_trans read open getattr }; diff --git a/android/sepolicy/hal_gnss.te b/android/sepolicy/hal_gnss.te index 4bbbcb1d..3ef8cd4e 100644 --- a/android/sepolicy/hal_gnss.te +++ b/android/sepolicy/hal_gnss.te @@ -4,3 +4,4 @@ typeattribute hal_gnss_default hal_wifi_hostapd_server; net_domain(hal_gnss_default) allow hal_gnss_default hal_gnss_default:capability { net_raw }; +allow hal_gnss_default property_socket:sock_file { write }; -- cgit v1.2.1