summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorImo Richard Umoren <iumoren@google.com>2023-12-12 02:36:44 +0000
committerImo Umoren <iumoren@google.com>2023-12-12 17:23:35 +0000
commitb3e48816fafd3d91652d8ac283587f050a986df7 (patch)
tree01fc076b0b3f7b67563204375c840bc85188a8f7
parent259348f8f767348988917badc565ef7da7425b5d (diff)
downloadzuma-sepolicy-b3e48816fafd3d91652d8ac283587f050a986df7.tar.gz
Twoshay: Add SELinux Permissions for CHRE [Zuma]
Adds connection and write permissions for chre socket to SELinux policy. Used for the Wallaby nanoapp. Bug: b/315347346 Bug: b/314721681 Test: Manually tested on SB3 Proto 1.0 Change-Id: I4a01be73d76a577d8da07c36276349525c0fda68
-rw-r--r--vendor/twoshay.te5
1 files changed, 5 insertions, 0 deletions
diff --git a/vendor/twoshay.te b/vendor/twoshay.te
index 219619a..0456028 100644
--- a/vendor/twoshay.te
+++ b/vendor/twoshay.te
@@ -2,3 +2,8 @@
binder_call(twoshay, systemui_app)
binder_call(twoshay, hal_radioext_default)
+
+# b/315347346
+# b/314721681
+unix_socket_connect(twoshay, chre, chre)
+allow twoshay self:capability2 block_suspend;