diff --git a/private/access_vectors b/private/access_vectors index 0fba3feff8fc2cf6c7574a21f057112d96df4cc1..d0c52f700c314a5488e518345609a86c5bb179d0 100644 --- a/private/access_vectors +++ b/private/access_vectors @@ -657,6 +657,9 @@ inherits socket class qipcrtr_socket inherits socket +class smc_socket +inherits socket + class property_service { set diff --git a/private/security_classes b/private/security_classes index 02e3ef2f6ee2d109a62e814f86e77b158ac2159c..2cfc768b5449e2740cfc3d037d080f0bc419b80e 100644 --- a/private/security_classes +++ b/private/security_classes @@ -127,6 +127,7 @@ class nfc_socket class vsock_socket class kcm_socket class qipcrtr_socket +class smc_socket # Property service class property_service # userspace diff --git a/private/webview_zygote.te b/private/webview_zygote.te index 501581abf3b3f091bc31b30b5641f844b2cd2517..c6ba4478dd263e5944c4e462f547c9200636d2f6 100644 --- a/private/webview_zygote.te +++ b/private/webview_zygote.te @@ -108,7 +108,7 @@ neverallow webview_zygote domain:{ x25_socket rose_socket decnet_socket atmsvc_socket rds_socket irda_socket pppox_socket llc_socket can_socket tipc_socket bluetooth_socket iucv_socket rxrpc_socket isdn_socket phonet_socket ieee802154_socket caif_socket - alg_socket nfc_socket vsock_socket kcm_socket qipcrtr_socket + alg_socket nfc_socket vsock_socket kcm_socket qipcrtr_socket smc_socket } *; # Do not allow access to Bluetooth-related system properties. diff --git a/public/global_macros b/public/global_macros index a61ffbc42a6e0e98b652bc3c6155d9b58466eb05..4ea8dc3ba1e69d65a30aab740cfbd664203b1714 100644 --- a/public/global_macros +++ b/public/global_macros @@ -8,7 +8,7 @@ define(`notdevfile_class_set', `{ file lnk_file sock_file fifo_file }') define(`file_class_set', `{ devfile_class_set notdevfile_class_set }') define(`dir_file_class_set', `{ dir file_class_set }') -define(`socket_class_set', `{ socket tcp_socket udp_socket rawip_socket netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket appletalk_socket netlink_route_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_dnrt_socket netlink_kobject_uevent_socket tun_socket netlink_iscsi_socket netlink_fib_lookup_socket netlink_connector_socket netlink_netfilter_socket netlink_generic_socket netlink_scsitransport_socket netlink_rdma_socket netlink_crypto_socket sctp_socket icmp_socket ax25_socket ipx_socket netrom_socket atmpvc_socket x25_socket rose_socket decnet_socket atmsvc_socket rds_socket irda_socket pppox_socket llc_socket can_socket tipc_socket bluetooth_socket iucv_socket rxrpc_socket isdn_socket phonet_socket ieee802154_socket caif_socket alg_socket nfc_socket vsock_socket kcm_socket qipcrtr_socket }') +define(`socket_class_set', `{ socket tcp_socket udp_socket rawip_socket netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket appletalk_socket netlink_route_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_dnrt_socket netlink_kobject_uevent_socket tun_socket netlink_iscsi_socket netlink_fib_lookup_socket netlink_connector_socket netlink_netfilter_socket netlink_generic_socket netlink_scsitransport_socket netlink_rdma_socket netlink_crypto_socket sctp_socket icmp_socket ax25_socket ipx_socket netrom_socket atmpvc_socket x25_socket rose_socket decnet_socket atmsvc_socket rds_socket irda_socket pppox_socket llc_socket can_socket tipc_socket bluetooth_socket iucv_socket rxrpc_socket isdn_socket phonet_socket ieee802154_socket caif_socket alg_socket nfc_socket vsock_socket kcm_socket qipcrtr_socket smc_socket }') define(`dgram_socket_class_set', `{ udp_socket unix_dgram_socket }') define(`stream_socket_class_set', `{ tcp_socket unix_stream_socket }') define(`unpriv_socket_class_set', `{ tcp_socket udp_socket unix_stream_socket unix_dgram_socket }')