diff --git a/private/compat/26.0/26.0.ignore.cil b/private/compat/26.0/26.0.ignore.cil index ae0a94d62f74d1faed9c4a7d67291f523f5150d3..d45596ab982b97674faf2f33653adcb19731982e 100644 --- a/private/compat/26.0/26.0.ignore.cil +++ b/private/compat/26.0/26.0.ignore.cil @@ -88,6 +88,8 @@ statsd statsd_exec statsd_tmpfs + statsdw + statsdw_socket statscompanion_service storaged_data_file sysfs_fs_ext4_features diff --git a/private/compat/27.0/27.0.ignore.cil b/private/compat/27.0/27.0.ignore.cil index 79640463dcffb42edb72949f0cdb5a41d851edad..aa322418f657488fc55424ee7383de5a5ca9cdd0 100644 --- a/private/compat/27.0/27.0.ignore.cil +++ b/private/compat/27.0/27.0.ignore.cil @@ -76,6 +76,8 @@ statsd statsd_exec statsd_tmpfs + statsdw + statsdw_socket storaged_data_file system_boot_reason_prop system_update_service diff --git a/private/file.te b/private/file.te index fda972b48f11e374048e78ade629a76df82db556..58ee0def82540ac88fbc049c5eef678f32235a95 100644 --- a/private/file.te +++ b/private/file.te @@ -4,6 +4,8 @@ type config_gz, fs_type, proc_type; # /data/misc/stats-data, /data/misc/stats-service type stats_data_file, file_type, data_file_type, core_data_file_type; +type statsdw_socket, file_type, coredomain_socket, mlstrustedobject; + # /data/misc/storaged type storaged_data_file, file_type, data_file_type, core_data_file_type; diff --git a/private/file_contexts b/private/file_contexts index c2a8c74e102c4fdacc6701216e91a04142d1aa99..71bff736572776b534a04644f3d4959f28cc128b 100644 --- a/private/file_contexts +++ b/private/file_contexts @@ -132,6 +132,7 @@ /dev/socket/logd u:object_r:logd_socket:s0 /dev/socket/logdr u:object_r:logdr_socket:s0 /dev/socket/logdw u:object_r:logdw_socket:s0 +/dev/socket/statsdw u:object_r:statsdw_socket:s0 /dev/socket/mdns u:object_r:mdns_socket:s0 /dev/socket/mdnsd u:object_r:mdnsd_socket:s0 /dev/socket/mtpd u:object_r:mtpd_socket:s0 diff --git a/private/statsd.te b/private/statsd.te index 06d6e01e656f661083e0d3ffed6e3aed66e0fd6a..7305464ba370c6f6c8479ddedb30e254bfb796e6 100644 --- a/private/statsd.te +++ b/private/statsd.te @@ -1,4 +1,4 @@ -type statsd, domain; +type statsd, domain, mlstrustedsubject; typeattribute statsd coredomain; init_daemon_domain(statsd) @@ -82,6 +82,12 @@ allow statsd adbd:fd use; allow statsd adbd:unix_stream_socket { getattr read write }; allow statsd shell:fifo_file { getattr read }; +unix_socket_send(bluetooth, statsdw, statsd) +unix_socket_send(bootstat, statsdw, statsd) +unix_socket_send(platform_app, statsdw, statsd) +unix_socket_send(statsd, statsdw, statsd) +unix_socket_send(system_server, statsdw, statsd) + ### ### neverallow rules ###