Allow gril to access radioext-aidl

Selinux logs fixed:

auditd  : avc:  denied  { find } for pid=2251 uid=10246 name=vendor.google.radio_ext.IRadioExt/default scontext=u:r:grilservice_app:s0:c246,c256,c512,c768 tcontext=u:object_r:hal_radio_ext_service:s0 tclass=service_manager permissive=0

auditd  : type=1400 audit(0.0:24): avc:  denied  { call } for  comm="oid.grilservice" scontext=u:r:grilservice_app:s0:c246,c256,c512,c768 tcontext=u:r:hal_radio_ext:s0 tclass=binder permissive=0 app=com.google.android.grilservice

Bug: 322125172
Test: the two selinux logs do not appear and no errors when gril calls radioext-aidl
Change-Id: Iec490afe4fbfd276ecda592fa20ac871f086c5f0
This commit is contained in:
Alan Chen 2024-02-23 12:40:47 +08:00
parent 3dc01cbd48
commit af06437455
3 changed files with 6 additions and 0 deletions

View file

@ -0,0 +1,2 @@
allow grilservice_app hal_radio_ext_service:service_manager find;
binder_call(grilservice_app, hal_radio_ext)

View file

@ -0,0 +1,2 @@
allow grilservice_app hal_radio_ext_service:service_manager find;
binder_call(grilservice_app, hal_radio_ext)

2
tokay/grilservice_app.te Normal file
View file

@ -0,0 +1,2 @@
allow grilservice_app hal_radio_ext_service:service_manager find;
binder_call(grilservice_app, hal_radio_ext)