Skip to content
Snippets Groups Projects
Commit 5919d1c8 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

domain.te: Temporarily work around debuggerd connection bug

For some reason, the debuggerd socket isn't getting properly
labeled. Work around this bug for now by allowing all domains
to connect to all unix stream sockets.

Bug: 9858255
Change-Id: If994e51b0201ea8cae46341efc76dc71a4e577c8
parent 748fdef6
No related branches found
No related tags found
No related merge requests found
...@@ -30,9 +30,14 @@ allow domain adbd:unix_stream_socket connectto; ...@@ -30,9 +30,14 @@ allow domain adbd:unix_stream_socket connectto;
allow domain adbd:fd use; allow domain adbd:fd use;
allow domain adbd:unix_stream_socket { getattr read write shutdown }; allow domain adbd:unix_stream_socket { getattr read write shutdown };
# Talk to debuggerd. ###
### Talk to debuggerd.
###
allow domain debuggerd:process sigchld; allow domain debuggerd:process sigchld;
allow domain debuggerd:unix_stream_socket connectto; allow domain debuggerd:unix_stream_socket connectto;
# b/9858255 - debuggerd sockets are not getting properly labeled.
# TODO: Remove this temporary workaround.
allow domain init:unix_stream_socket connectto;
# Root fs. # Root fs.
allow domain rootfs:dir r_dir_perms; allow domain rootfs:dir r_dir_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment