PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge changes from topic 'ipsec-service'

Browse Source 
* changes:
  Add IpSecService SEPolicy
  Update Common NetD SEPolicy to allow Netlink XFRM
This commit is contained in:
Treehugger Robot 2017-03-29 22:50:49 +00:00 committed by Gerrit Code Review
commit 328153893f
3 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
private/service_contexts
View File

@ -66,6 +66,7 @@ iphonesubinfo2 u:object_r:radio_service:s0
iphonesubinfo u:object_r:radio_service:s0 iphonesubinfo u:object_r:radio_service:s0
ims u:object_r:radio_service:s0 ims u:object_r:radio_service:s0
imms u:object_r:imms_service:s0 imms u:object_r:imms_service:s0
ipsec u:object_r:ipsec_service:s0
isms_msim u:object_r:radio_service:s0 isms_msim u:object_r:radio_service:s0
isms2 u:object_r:radio_service:s0 isms2 u:object_r:radio_service:s0
isms u:object_r:radio_service:s0 isms u:object_r:radio_service:s0

3
public/netd.te
View File

@ -80,6 +80,9 @@ allow netd netdomain:{
} { read write getattr setattr getopt setopt }; } { read write getattr setattr getopt setopt };
allow netd netdomain:fd use; allow netd netdomain:fd use;
# give netd permission to read and write netlink xfrm
allow netd self:netlink_xfrm_socket { create_socket_perms_no_ioctl nlmsg_write nlmsg_read };
### ###
### Neverallow rules ### Neverallow rules
### ###

1
public/service.te
View File

@ -79,6 +79,7 @@ type hdmi_control_service, system_api_service, system_server_service, service_ma
type input_method_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type input_method_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type input_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type input_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type imms_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type imms_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type ipsec_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type jobscheduler_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type jobscheduler_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type launcherapps_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type launcherapps_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type location_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type location_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;