From bbd26c9cb876d0af5a242d5ffbf6531a6a372405 Mon Sep 17 00:00:00 2001 From: Wilson Sung Date: Wed, 31 Jan 2024 02:58:43 +0000 Subject: [PATCH 1/2] Update SELinux error Test: SELinuxUncheckedDenialBootTest Bug: 323086582 Test: scanBugreport Bug: 323087490 Test: scanAvcDeniedLogRightAfterReboot Bug: 323087197 Change-Id: I99006484464f82125a63be9c26eb8d8051c57840 --- tracking_denials/bug_map | 3 +++ 1 file changed, 3 insertions(+) diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index cfa4e3d9..1a99a16a 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -7,10 +7,13 @@ insmod-sh insmod-sh key b/274374722 kernel dm_device blk_file b/319403445 mtectrl unlabeled dir b/264483752 pixelstats_vendor sysfs file b/299553682 +rfsd vendor_cbd_prop file b/323086582 system_server sysfs_batteryinfo file b/294967729 system_suspend sysfs dir b/320693841 system_suspend sysfs_batteryinfo dir b/317316633 vendor_init default_prop file b/315104235 vendor_init default_prop file b/315104803 +vendor_init default_prop file b/323087197 +vendor_init default_prop file b/323087490 vendor_init default_prop property_service b/315104235 vendor_init vendor_volte_mif_off property_service b/316816642 From 98972beada4d9291fbc03d5f1331119be9e1a06a Mon Sep 17 00:00:00 2001 From: Kyle Tso Date: Fri, 26 Jan 2024 22:08:15 +0800 Subject: [PATCH 2/2] Allow dump_power to read sysfs directories dump_power needs to read the directories under /sys/class/power_supply. Bug: 320613177 Bug: 322294676 Change-Id: I7bc55b90d67a1d05bb097955ed632d62535e0f40 Signed-off-by: Kyle Tso --- vendor/dump_power.te | 1 + 1 file changed, 1 insertion(+) diff --git a/vendor/dump_power.te b/vendor/dump_power.te index 4437dfaf..539c3b29 100644 --- a/vendor/dump_power.te +++ b/vendor/dump_power.te @@ -23,6 +23,7 @@ allow dump_power persist_battery_file:file r_file_perms; allow dump_power vendor_shell_exec:file execute_no_trans; allow dump_power battery_mitigation_exec:file execute_no_trans; allow dump_power sysfs_iio_devices:dir search; +allow dump_power sysfs:dir r_dir_perms; userdebug_or_eng(` allow dump_power debugfs:dir r_dir_perms;