a71-common: sepolicy: Add additional hal_audio_default labels
* Fixes:
08-02 20:02:11.507 915 915 I auditd : type=1400 audit(0.0:243): avc: denied { search } for comm="writer" name="/" dev="sda9" ino=2 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:efs_file:s0 tclass=dir permissive=0
08-02 20:02:11.507 915 915 W writer : type=1400 audit(0.0:243): avc: denied { search } for name="/" dev="sda9" ino=2 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:efs_file:s0 tclass=dir permissive=0
08-02 20:02:11.507 915 915 I auditd : type=1400 audit(0.0:243): avc: denied { search } for comm="writer" name="/" dev="sda9" ino=2 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:efs_file:s0 tclass=dir permissive=0
08-02 20:02:11.507 915 915 W writer : type=1400 audit(0.0:243): avc: denied { search } for name="/" dev="sda9" ino=2 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:efs_file:s0 tclass=dir permissive=0
Change-Id: I12e024836682f1487c6022c3a1a7346dd02ca634
This commit is contained in:
2
sepolicy/vendor/hal_audio_default.te
vendored
2
sepolicy/vendor/hal_audio_default.te
vendored
@@ -1,5 +1,7 @@
|
||||
allow hal_audio_default hal_bluetooth_a2dp_hwservice:hwservice_manager { add find };
|
||||
|
||||
allow hal_audio_default efs_file:dir { ioctl read getattr lock open watch watch_reads search };
|
||||
|
||||
allow hal_audio_default imei_efs_file:dir search;
|
||||
allow hal_audio_default imei_efs_file:file { read open getattr };
|
||||
|
||||
|
||||
Reference in New Issue
Block a user