commit a643d43eec758a6edc6c63c50c84201c991b3fcf
author Jeff Vander Stoep <jeffv@google.com> Tue Jul 12 12:01:04 2016 -0700
committer Jeff Vander Stoep <jeffv@google.com> Tue Jul 12 12:01:54 2016 -0700
tree 56111454b35da8f3f865f6fae12aa49ba9aab4b3
parent 2ceba872302ea7682bc8bdf9a2180e7d7929ca28

rild: allow ioctls on generic sockets

Whitelist msm router ipc ioctl commands.

avc: denied { ioctl } for pid=677 comm="rild" path="socket:[18492]" dev="sockfs" ino=18492 ioctlcmd=c302 scontext=u:r:rild:s0 tcontext=u:r:rild:s0 tclass=socket permissive=0
avc: denied { ioctl } for pid=1810 comm="rild" path="socket:[25976]" dev="sockfs" ino=25976 ioctlcmd=c304 scontext=u:r:rild:s0 tcontext=u:r:rild:s0 tclass=socket permissive=0

Change-Id: I02143d0746ed026dc6d7e44cd57cf107248efbef

sepolicy/rild.te

diff --git a/sepolicy/rild.te b/sepolicy/rild.te
index cebcfe0..a7ce841 100644
--- a/sepolicy/rild.te
+++ b/sepolicy/rild.te
@@ -16,6 +16,7 @@
 allow rild time:unix_stream_socket connectto;
 
 allowxperm rild self:udp_socket ioctl priv_sock_ioctls;
+allow rild self:socket ioctl;
 allowxperm rild self:socket ioctl msm_sock_ipc_ioctls;
 userdebug_or_eng(`
   allow rild diag_device:chr_file rw_file_perms;