From ea2a278d90749d49e3bffd057f47a5dcf87869d2 Mon Sep 17 00:00:00 2001 From: AndroidHQ254 Date: Mon, 29 Apr 2024 00:16:07 +0300 Subject: [PATCH] a32: sepolicy: Address macloader denials avc: denied { open } for comm="macloader" path="/proc/731/net/dev" dev="proc" ino=4026532120 scontext=u:r:macloader:s0 tcontext=u:object_r:proc_net:s0 tclass=file permissive=1 avc: denied { ioctl } for comm="macloader" path="socket:[17831]" dev="sockfs" ino=17831 ioctlcmd=0x8914 scontext=u:r:macloader:s0 tcontext=u:r:macloader:s0 tclass=udp_socket permissive=1 avc: denied { create } for comm="macloader" scontext=u:r:macloader:s0 tcontext=u:r:macloader:s0 tclass=udp_socket permissive=1 --- sepolicy/vendor/macloader.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sepolicy/vendor/macloader.te b/sepolicy/vendor/macloader.te index 7397642..e2e0672 100644 --- a/sepolicy/vendor/macloader.te +++ b/sepolicy/vendor/macloader.te @@ -14,6 +14,9 @@ allow macloader init:unix_stream_socket connectto; allow macloader sysfs_wifi:dir search; allow macloader sysfs_wifi:file rw_file_perms; allow macloader efs_file:dir search; +allow macloader proc_net:file rw_file_perms; +allow macloader self:udp_socket { ioctl create }; +allowxperm macloader self:udp_socket ioctl { 0x8913-0x8914 }; set_prop(macloader, vendor_mtk_wifi_hotspot_prop) set_prop(macloader, wifi_log_prop)