OwlCyberDefense / setools

setools has moved to https://github.com/SELinuxProject/setools
Other
91 stars 34 forks source link

Sytax Error #182

Open Pxddy opened 6 years ago

Pxddy commented 6 years ago

Hi, I'm new to this whole policy stuff so i hope this isn't a mistake on my side. I'm using the latest version of SETools in combination with the Tool SElint (SEAndroid policy analysis tool). To get some experience I tried to analyze the Policy Files of the Mashmallow AOSP Tree but always end up getting Syntax Errors in the following files:

untrusted_app.te:105: allow untrusted_app domain:{ rawip_socket tcp_socket udp_socket } unpriv_sock_ioctls;

shell.te:81: allow shell self:{ rawip_socket tcp_socket udp_socket } unpriv_sock_ioctls;

isolated_app.te:22: allow isolated_app domain:{ rawip_socket tcp_socket udp_socket } unpriv_sock_ioctls;

domain.te:39: allow domain self:unix_stream_socket { create_stream_socket_perms connectto }; allow domain domain:{ unix_dgram_socket unix_stream_socket } unpriv_unix_sock_ioctls;

When I comment the affected lines out, I don't get any Errors and the program runs like intended.

Have you guys any suggestion for me how to fix this or should I continue commenting this lines out?

Best Regards

Paddy