Evolution-X-Tensor/device_google_gs-common
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

aoc: add permissions for new sysfs node

Browse source 
Resolving the following audit denials:

- [    6.450477] type=1400 audit(1699468821.992:6): avc:  denied
{ read } for comm="aocd" name="notify_timeout_aoc_status"
dev="sysfs" ino=78572 scontext=u:r:aocd:s0
tcontext=u:object_r:sysfs_aoc:s0 tclass=file permissive=0

- type=1107 audit(0.0:9): uid=0 auid=4294967295 ses=4294967295
subj=u:r:init:s0 msg='avc: denied  { set } for
property=persist.vendor.aoc.status_request_timed_out
pid=1035 uid=0 gid=0 scontext=u:r:aocd:s0
tcontext=u:object_r:vendor_default_prop:s0
tclass=property_service permissive=0'
(and get for the same node)

Test: on device
Bug: 309950738
Change-Id: I476624a6d95667d47ada765d6fe392eecc615256
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
This commit is contained in:
Alex Iacobucci 2023-11-09 17:56:06 +00:00
parent f382fb25df
commit 9035c70f06
4 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
aoc/sepolicy/property_contexts
View file

@ -1,2 +1,3 @@
# AoC
vendor.aoc.firmware.version u:object_r:vendor_aoc_prop:s0
persist.vendor.aoc.status_request_timed_out u:object_r:vendor_timeout_aoc_prop:s0