Skip to content
Snippets Groups Projects
Commit 495e9d12 authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Allow getopt / getattr to bluetooth unix_stream_socket.


Resolve denials such as:

avc:  denied  { getattr } for  pid=16226 comm="Thread-2096" path="socket:[414657]" dev="sockfs" ino=414657 scontext=u:r:untrusted_app:s0 tcontext=u:r:bluetooth:s0 tclass=unix_stream_socket

avc:  denied  { getopt } for  pid=5890 comm="FinalizerDaemon" scontext=u:r:untrusted_app:s0 tcontext=u:r:bluetooth:s0 tclass=unix_stream_socket

Change-Id: Iea7790aa4f8e24f3ec0d2c029933a3902333472e
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent 28afdd92
No related branches found
No related tags found
No related merge requests found
...@@ -31,7 +31,7 @@ allow bluetooth self:capability net_admin; ...@@ -31,7 +31,7 @@ allow bluetooth self:capability net_admin;
# Allow clients to use a socket provided by the bluetooth app. # Allow clients to use a socket provided by the bluetooth app.
# TODO: See if this is still required under bluedroid. # TODO: See if this is still required under bluedroid.
allow bluetoothdomain bluetooth:unix_stream_socket { read write shutdown }; allow bluetoothdomain bluetooth:unix_stream_socket { getopt getattr read write shutdown };
# tethering # tethering
allow bluetooth self:tun_socket create_socket_perms; allow bluetooth self:tun_socket create_socket_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment