powerhint: Add WriteOnly flag for PA_KILL to avoid SELinux error

The node "/sys/kernel/vendor_mm/pa_kill/reclaim_kb" is write-only. So we need to add WriteOnly flag to prevent powerhal to read the node.

SELinux errors:
avc:  denied  { dac_read_search } for  comm="android.hardwar" capability=2  scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0
avc:  denied  { dac_override } for  comm="android.hardwar" capability=1  scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0

Bug: 350830411
Change-Id: Ic78a419b1500efce631e848d36816bc87d666920
Test: adb shell dumpsys android.hardware.power.IPower/default, check if any avc denied messages
Flag: EXEMPT config json change
This commit is contained in:
Richard Chang 2024-10-29 08:25:10 +00:00
parent b2bbfc29ea
commit 20ca16779a
6 changed files with 6 additions and 0 deletions

View file

@ -958,6 +958,7 @@
"102400",
"0"
],
"WriteOnly": true,
"ResetOnInit": false
},
{

View file

@ -958,6 +958,7 @@
"102400",
"0"
],
"WriteOnly": true,
"ResetOnInit": false
},
{

View file

@ -612,6 +612,7 @@
"102400",
"0"
],
"WriteOnly": true,
"ResetOnInit": false
}
],

View file

@ -882,6 +882,7 @@
"102400",
"0"
],
"WriteOnly": true,
"ResetOnInit": false
},
{

View file

@ -958,6 +958,7 @@
"102400",
"0"
],
"WriteOnly": true,
"ResetOnInit": false
},
{

View file

@ -796,6 +796,7 @@
"102400",
"0"
],
"WriteOnly": true,
"ResetOnInit": false
}
],