drgreen/android_device_google_gs-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add missing node_bind permission to SEPolicy.

Browse Source 
Bug: 299315760
Test: Tested with SEPolicy enforcement on and verified PCS could open
requested video stream.

Change-Id: I41af99531feb968015c46cdf67d8c2d03b243a93
This commit is contained in:
Aaron Ramirez 2023-09-18 10:40:56 -07:00
parent 7f7c979ade
commit 15cb30dcaf
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
camera/sepolicy/vendor/vendor_pcs_app.te vendored
View File

@ -13,7 +13,9 @@ binder_call(vendor_pcs_app, hal_camera_default);
allow vendor_pcs_app vendor_pcs_app:unpriv_socket_class_set create_socket_perms_no_ioctl;
allow vendor_pcs_app fwmarkd_socket:sock_file write;
allow vendor_pcs_app port:tcp_socket name_connect;
allow vendor_pcs_app port:udp_socket name_bind;
allow vendor_pcs_app netd:unix_stream_socket connectto;
allow vendor_pcs_app node:udp_socket node_bind;
allow netd vendor_pcs_app:unpriv_socket_class_set create_socket_perms_no_ioctl;
allow netd vendor_pcs_app:fd use;