Hi SEAndroid, I am wondering if there is a way to map specific system calls to specific permissions in SEAndroid or previous SELinux. For instance, the syscall "fork" requires a permission "fork" of class "process". Some of the permission names are the same as syscalls. But others are not. For example, syscall "stat" requires permissions "getattr". I am reading the kernel code and selinux kernel module code but different syscalls are implemented in different places in kernel. I don't know if there is an easy way to collect them. Or maybe I should trace backwards from security_operations?
Thanks in advance! ---- Best Regards! Ruowen
_______________________________________________ Seandroid-list mailing list [email protected] To unsubscribe, send email to [email protected]. To get help, send an email containing "help" to [email protected].
