commit ccacb9e1c592e524bf36970cb0c30f5d26fd026b
author Nick Kralevich <nnk@google.com> Fri Mar 21 20:33:54 2014 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Mar 21 20:33:54 2014 +0000
tree b1ea3f635a52dfe384df665645ec59e89daf2e91
parent 60a9d6e0e5ce35f3b17ac6c0f9930b6de6427c2e
parent aee14432800280cf4a44610420f9fe06f11f5aa1

Merge "Rewrite mediaserver socket rule using macro."

sepolicy/mediaserver.te

diff --git a/sepolicy/mediaserver.te b/sepolicy/mediaserver.te
index 2183efb..61d68d6 100644
--- a/sepolicy/mediaserver.te
+++ b/sepolicy/mediaserver.te
@@ -3,5 +3,6 @@
 
 unix_socket_send(mediaserver, camera, camera)
 
-# Permit mediaserver to create sockets
-allow mediaserver self:socket create;
+# Permit mediaserver to create sockets with no specific SELinux class.
+# TODO: Investigate the specific type of socket.
+allow mediaserver self:socket create_socket_perms;