sepolicy: basic: non_plat: Address Audio HAL tcp_socket neverallow
* Due to system SEPolicy/audioserver changes in Android 13,
mtk_hal_audio needs to be allowed to create and use TCP sockets.
Signed-off-by: bengris32 <bengris32@protonmail.ch>
diff --git a/basic/non_plat/mtk_hal_audio.te b/basic/non_plat/mtk_hal_audio.te
index f02354c..d948673 100644
--- a/basic/non_plat/mtk_hal_audio.te
+++ b/basic/non_plat/mtk_hal_audio.te
@@ -25,8 +25,8 @@
neverallow mtk_hal_audio { file_type fs_type }:file execute_no_trans;
# mtk_hal_audio should never need network access.
-# Disallow network sockets.
-neverallow mtk_hal_audio domain:{ tcp_socket udp_socket rawip_socket } *;
+# Disallow network sockets apart from TCP sockets.
+neverallow mtk_hal_audio domain:{ udp_socket rawip_socket } *;
# Date : WK14.32
# Operation : Migration