drgreen/android_device_google_gs-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add missing node_bind permission to SEPolicy.

Browse Source 
Bug: 299315760
Test: Tested with SEPolicy enforcement on and verified PCS could open
requested video stream.

Merged-In: I41af99531feb968015c46cdf67d8c2d03b243a93
Change-Id: I41af99531feb968015c46cdf67d8c2d03b243a93
This commit is contained in:
Aaron Ramirez 2023-09-18 10:31:34 -07:00
parent f74211330b
commit 481c2a0799
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
camera/sepolicy/vendor_pcs_app.te
View File

@ -26,7 +26,9 @@ binder_call(vendor_pcs_app, hal_pixel_remote_camera_service);
allow vendor_pcs_app vendor_pcs_app:unpriv_socket_class_set create_socket_perms_no_ioctl;
allow vendor_pcs_app fwmarkd_socket:sock_file write;
allow vendor_pcs_app port:tcp_socket name_connect;
allow vendor_pcs_app port:udp_socket name_bind;
allow vendor_pcs_app netd:unix_stream_socket connectto;
allow vendor_pcs_app node:udp_socket node_bind;
allow netd vendor_pcs_app:unpriv_socket_class_set create_socket_perms_no_ioctl;
allow netd vendor_pcs_app:fd use;