On Thu, 2012-07-19 at 16:07 -0700, Haiqing Jiang wrote: > --- > mediaserver.te | 3 +++ > 1 files changed, 3 insertions(+), 0 deletions(-) > > diff --git a/mediaserver.te b/mediaserver.te > index d3f0334..6dd4d4a 100644 > --- a/mediaserver.te > +++ b/mediaserver.te > @@ -40,3 +40,6 @@ allow mediaserver camera_calibration_file:file r_file_perms; > # Read/[write] to /proc/net/xt_qtaguid/ctrl and /dev/xt_qtaguid > allow mediaserver qtaguid_proc:file rw_file_perms; > allow mediaserver qtaguid_device:chr_file r_file_perms; > + > +# Talk to rild via socket > +unix_socket_connect(mediaserver, rild, rild) Hmm...it used to be that only radio could connect to rild. socket perms are 660 root radio, and mediaserver runs as media. Doesn't seem like this is possible even under DAC. Clarification requested? -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
