sepolicy: location: fix socket accesses

These daemons need connecto vendor_location.

This fixes the following errors:

05-18 17:37:02.904  1487  1487 I LOWI-9.0.0.89.d: [MessageQ_Client] connecting to server [/dev/socket/location/mq/location-mq-s]
05-18 17:37:02.904  1487  1487 E LOWI-9.0.0.89.d: [MessageQ_Client] connect error: 13, [Permission denied]
05-18 17:37:02.904  1487  1487 E LOWI-9.0.0.89.d: [MessageQ_Client] connect failed 3
05-18 17:37:02.904  1487  1487 W LOWI-9.0.0.89.d: [LOWIController] retry count 4
05-18 17:37:02.903  1487  1487 W lowi-server: type=1400 audit(0.0:66): avc: denied { connectto } for path="/dev/socket/location/mq/location-mq-s" scontext=u:r:vendor_location_lowi_server:s0 tcontext=u:r:vendor_location:s0 tclass=unix_stream_socket permissive=0 srawcon="" trawcon=""

Change-Id: Ia5e2a365648f47bc8e6a17baff6e7a580641ffb7
Signed-off-by: Juhyung Park <qkrwngud825@gmail.com>
This commit is contained in:
Juhyung Park 2023-05-18 19:09:01 +09:00
parent cd16ba98c6
commit 1e233bbfc8
3 changed files with 3 additions and 0 deletions

View File

@ -0,0 +1 @@
allow vendor_location_lowi_server vendor_location:unix_stream_socket connectto;

View File

@ -0,0 +1 @@
allow vendor_location_slim_daemon vendor_location:unix_stream_socket connectto;

View File

@ -0,0 +1 @@
allow vendor_location_xtra_daemon vendor_location:unix_stream_socket connectto;