drgreen/android_device_google_gs-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[SELinux] Update gyotaku_app domain policy for sync changes from upstream

Browse Source 
Bug: 302083256

Test: Local build and tested pass
Change-Id: Ieae2eb5dac827fcc64129ece7d4e199d2f341da3
This commit is contained in:
Klines Jiang 2023-09-26 08:23:43 +00:00
parent 68c40b065f
commit 89796047b8
1 changed files with 7 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
gyotaku_app/sepolicy/gyotaku_app.te
View File

@ -1,34 +1,25 @@
type gyotaku_app, domain;
app_domain(gyotaku_app)
userdebug_or_eng(`
app_domain(gyotaku_app)
net_domain(gyotaku_app)
# For Gyotaku app common use
allow gyotaku_app app_api_service:service_manager find;
allow gyotaku_app privapp_data_file:lnk_file read;
allow gyotaku_app gyotaku_app:udp_socket create;
allow gyotaku_app system_app_data_file:dir create_dir_perms;
allow gyotaku_app system_app_data_file:file create_file_perms;
# For cloud and network related use
allow gyotaku_app dnsproxyd_socket:sock_file write;
allow gyotaku_app gyotaku_app:udp_socket connect;
allow gyotaku_app netd:unix_stream_socket connectto;
allow gyotaku_app gyotaku_app:tcp_socket create;
allow gyotaku_app privapp_data_file:file execute;
allow netd gyotaku_app:fd use;
allow netd gyotaku_app:tcp_socket {read write};
# For access /proc/fs/f2fs/* storage use
allow gyotaku_app proc_f2fs:dir search;
allow gyotaku_app proc_f2fs:file {open read};
allow gyotaku_app proc_f2fs:file r_file_perms;
# For access /proc/stat use
allow gyotaku_app proc_stat:file {read open getattr};
allow gyotaku_app proc_stat:file r_file_perms;
# For getproperty isDebuggable use
get_prop(gyotaku_app, userdebug_or_eng_prop)
# For persiste property use
allow gyotaku_app logpersistd_logging_prop:file {read open getattr map};
# For persistent property use
get_prop(gyotaku_app, logpersistd_logging_prop);
')