diff --git a/sepolicy/ohos_policy/communication/netmanager/system/normal_hap.te b/sepolicy/ohos_policy/communication/netmanager/system/normal_hap.te index 984a6bd97eb3b6ef857583fba350eb9342fd30f6..03f6f8e45b8bc0bd839f0b07b6117abda5ec541f 100644 --- a/sepolicy/ohos_policy/communication/netmanager/system/normal_hap.te +++ b/sepolicy/ohos_policy/communication/netmanager/system/normal_hap.te @@ -11,5 +11,10 @@ # See the License for the specific language governing permissions and # limitations under the License. +allow normal_hap normal_hap:udp_socket { getopt }; +allow normal_hap data_file:dir { write add_name remove_name }; +allow normal_hap data_file:sock_file { write create setattr unlink }; +allow normal_hap normal_hap:unix_dgram_socket { bind setopt getopt getattr read write sendto }; +allow normal_hap fwmark_service:sock_file { write }; allow normal_hap_attr normal_hap_attr:udp_socket { getopt }; allow normal_hap_attr fwmark_service:sock_file { write }; diff --git a/sepolicy/ohos_policy/communication/netmanager/system/system_basic_hap.te b/sepolicy/ohos_policy/communication/netmanager/system/system_basic_hap.te index 3b883a172f4bac2c0d158f0305b4af14ae5bc359..ec06fc8b6535b74b90ccfd7f5a8e42f65bf1876a 100644 --- a/sepolicy/ohos_policy/communication/netmanager/system/system_basic_hap.te +++ b/sepolicy/ohos_policy/communication/netmanager/system/system_basic_hap.te @@ -11,4 +11,8 @@ # See the License for the specific language governing permissions and # limitations under the License. +allow system_basic_hap arkcompiler_param:file { open read map }; +allow system_basic_hap data_file:dir { write add_name remove_name }; +allow system_basic_hap data_file:sock_file { write create setattr unlink }; +allow system_basic_hap system_basic_hap:unix_dgram_socket { bind setopt getopt getattr read write sendto }; allow system_basic_hap sa_comm_net_tethering_manager_service:samgr_class { get }; diff --git a/sepolicy/ohos_policy/communication/netmanager/system/system_core_hap.te b/sepolicy/ohos_policy/communication/netmanager/system/system_core_hap.te index e206b692d94d3738d980c33b2e03919011b30441..db0de87bd85b179067aba8542cf8f154289c0d65 100644 --- a/sepolicy/ohos_policy/communication/netmanager/system/system_core_hap.te +++ b/sepolicy/ohos_policy/communication/netmanager/system/system_core_hap.te @@ -13,4 +13,6 @@ allow system_core_hap netmanager:binder { call }; allow system_core_hap netmanager:binder { transfer }; - +allow system_core_hap data_file:dir { write add_name remove_name }; +allow system_core_hap data_file:sock_file { write create setattr unlink }; +allow system_core_hap system_core_hap:unix_dgram_socket { bind setopt getopt getattr read write sendto };