diff options
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/ioctl_defines | 5 | ||||
| -rw-r--r-- | sepolicy/ioctl_macros | 7 | ||||
| -rw-r--r-- | sepolicy/uim.te | 2 |
3 files changed, 14 insertions, 0 deletions
diff --git a/sepolicy/ioctl_defines b/sepolicy/ioctl_defines new file mode 100644 index 0000000..a031d75 --- /dev/null +++ b/sepolicy/ioctl_defines @@ -0,0 +1,5 @@ +define(`TCGETS', `0x00005401') +define(`TCSETS', `0x00005402') +define(`TCFLSH', `0x0000540b') +define(`TIOCSETD', `0x00005423') +define(`IOCTLUNKNOWN', `0x000055c8') diff --git a/sepolicy/ioctl_macros b/sepolicy/ioctl_macros new file mode 100644 index 0000000..99df172 --- /dev/null +++ b/sepolicy/ioctl_macros @@ -0,0 +1,7 @@ +define(`uim_sock_ipc_ioctls', `{ +TCGETS +TCSETS +TCFLSH +TIOCSETD +IOCTLUNKNOWN +}') diff --git a/sepolicy/uim.te b/sepolicy/uim.te index c452704..11b7fbf 100644 --- a/sepolicy/uim.te +++ b/sepolicy/uim.te @@ -12,3 +12,5 @@ allow uim ta_data_file:dir search; allow uim bluetooth_prop:sock_file write; allow uim ta_data_file:file r_file_perms; allow uim hci_attach_dev:chr_file ioctl; + +allowxperm uim hci_attach_dev:chr_file ioctl uim_sock_ipc_ioctls; |