Re: [PATCH 4/6] external/sepolicy: system talk to rild via socket

[Haiqing Jiang <hqjiang1988@xxxxxxxxx>]

I find the denial is from "GpsLocationProvider" which is labeled with "system". And for somehow it requires socket connection.

On Mon, Jul 23, 2012 at 6:28 AM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote:

On Thu, 2012-07-19 at 16:07 -0700, Haiqing Jiang wrote:
> ---
>  system.te |    1 +
>  1 files changed, 1 insertions(+), 0 deletions(-)
>
> diff --git a/system.te b/system.te
> index 5c34f81..1a25fd3 100644
> --- a/system.te
> +++ b/system.te
> @@ -107,6 +107,7 @@ unix_socket_connect(system, dbus, dbusd)
>  unix_socket_connect(system, gps, gpsd)
>  unix_socket_connect(system, bluetooth, bluetoothd)
>  unix_socket_send(system, wpa, wpa)
> +unix_socket_connect(system, rild, rild)
>
>  # Communicate over a socket created by surfaceflinger.
>  allow system surfaceflinger:unix_stream_socket { read write setopt };

Same as prior one.

--
Stephen Smalley
National Security Agency

--

-----------------------------------

Haiqing Jiang, PH.D student

Computer Science Department, North Carolina State University