Evolution-X-Tensor/device_google_gs-common
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add oemlock aidl service sepolicy

Browse source 
1. avc:  denied  { find } for pid=889 uid=1064 name=android.hardware.citadel.ICitadeld scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:citadeld_service:s0 tclass=service_manager permissive=1
2. avc: denied { read } for name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
3. avc: denied { write } for name="vndbinder" dev="binder" ino=6 scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
4. avc: denied { open } for path="/dev/binderfs/vndbinder" dev="binder" ino=6 scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
5. avc: denied { ioctl } for path="/dev/binderfs/vndbinder" dev="binder" ino=6 ioctlcmd=0x6209 scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:object_r:vndbinder_device:s0 tclass=chr_file permissive=1
6. avc: denied { call } for scontext=u:r:hal_oemlock_citadel:s0 tcontext=u:r:vndservicemanager:s0 tclass=binder permissive=1

Bug: 240932137
Change-Id: I804d925e020f6adfe8cd0c34aedead366c99adc0
This commit is contained in:
ChengYou Ho 2022-09-15 16:16:08 +00:00 • committed by Chengyou Ho
parent abfb0bafa5
commit 141c01ba0c
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
dauntless/sepolicy/file_contexts
View file

@ -5,6 +5,7 @@
/vendor/bin/hw/android\.hardware\.weaver@1\.0-service\.citadel u:object_r:hal_weaver_citadel_exec:s0 /vendor/bin/hw/android\.hardware\.weaver@1\.0-service\.citadel u:object_r:hal_weaver_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.identity@1\.0-service\.citadel u:object_r:hal_identity_citadel_exec:s0 /vendor/bin/hw/android\.hardware\.identity@1\.0-service\.citadel u:object_r:hal_identity_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.authsecret-service\.citadel u:object_r:hal_authsecret_citadel_exec:s0 /vendor/bin/hw/android\.hardware\.authsecret-service\.citadel u:object_r:hal_authsecret_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.oemlock-service\.citadel u:object_r:hal_oemlock_citadel_exec:s0
/vendor/bin/hw/citadel_updater u:object_r:citadel_updater:s0 /vendor/bin/hw/citadel_updater u:object_r:citadel_updater:s0
/vendor/bin/hw/citadeld u:object_r:citadeld_exec:s0 /vendor/bin/hw/citadeld u:object_r:citadeld_exec:s0

9
dauntless/sepolicy/hal_oemlock_citadel.te Normal file
View file

@ -0,0 +1,9 @@
type hal_oemlock_citadel, domain;
type hal_oemlock_citadel_exec, exec_type, vendor_file_type, file_type;
vndbinder_use(hal_oemlock_citadel)
binder_call(hal_oemlock_citadel, citadeld)
allow hal_oemlock_citadel citadeld_service:service_manager find;
hal_server_domain(hal_oemlock_citadel, hal_oemlock)
init_daemon_domain(hal_oemlock_citadel)