Skip to content
Snippets Groups Projects
Commit f8c96056 authored by Stephen Smalley's avatar Stephen Smalley Committed by Nick Kralevich
Browse files

Allow getopt / getattr to bluetooth unix_stream_socket.


Resolve denials such as:

avc:  denied  { getattr } for  pid=16226 comm="Thread-2096" path="socket:[414657]" dev="sockfs" ino=414657 scontext=u:r:untrusted_app:s0 tcontext=u:r:bluetooth:s0 tclass=unix_stream_socket

avc:  denied  { getopt } for  pid=5890 comm="FinalizerDaemon" scontext=u:r:untrusted_app:s0 tcontext=u:r:bluetooth:s0 tclass=unix_stream_socket

(cherry picked from commit 495e9d12)

Change-Id: Ie38979416b36b4452375d58baff46f14b78f1bad
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent 320e0ec7
No related branches found
No related tags found
No related merge requests found
...@@ -26,7 +26,8 @@ allow bluetooth sysfs_bluetooth_writable:file rw_file_perms; ...@@ -26,7 +26,8 @@ allow bluetooth sysfs_bluetooth_writable:file rw_file_perms;
allow bluetooth self:capability net_admin; allow bluetooth self:capability net_admin;
# Allow clients to use a socket provided by the bluetooth app. # Allow clients to use a socket provided by the bluetooth app.
allow bluetoothdomain bluetooth:unix_stream_socket { read write shutdown }; # TODO: See if this is still required under bluedroid.
allow bluetoothdomain bluetooth:unix_stream_socket { getopt getattr read write shutdown };
# tethering # tethering
allow bluetooth self:{ tun_socket udp_socket } { ioctl create }; allow bluetooth self:{ tun_socket udp_socket } { ioctl create };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment