device_google_gs-common/storage/sepolicy
Jaegeuk Kim 3bcf1e5891 Add Intelligence rc
By persist.vendor.intelligence,

 # on  -> mount(ok)    -> on
 # off -> write_zeroes -> remove -> rm(ok) -> disable
 # on  -> mount(fail)  -> remove -> rm(ok) -> disable

For SEpolicy,

type=1400 audit(1731445557.444:32): avc:  denied  { read } for  comm="kworker/u16:3" path="/dev/block/sda33" dev="tmpfs" ino=1050 scontext=u:r:kernel:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=1

type=1400 audit(1731445557.476:33): avc:  denied  { execute_no_trans } for  comm="storage_intelli" path="/vendor/bin/toolbox" dev="dm-11" ino=368 scontext=u:r:storage_intelligence:s0 tcontext=u:object_r:vendor_toolbox_exec:s0 tclass=file permissive=1

type=1400 audit(1731448933.292:16): avc:  denied  { search } for  comm="dd" name="block" dev="tmpfs" ino=12 scontext=u:r:storage_intelligence:s0 tcontext=u:object_r:block_device:s0 tclass=dir permissive=1

type=1400 audit(1731461590.844:16): avc:  denied  { write } for  comm="dd" name="sda33" dev="tmpfs" ino=1052 scontext=u:r:storage_intelligence:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=1
type=1400 audit(1731461590.844:17): avc:  denied  { open } for  comm="dd" path="/dev/block/sda33" dev="tmpfs" ino=1052 scontext=u:r:storage_intelligence:s0 tcontext=u:object_r:userdata_exp_block_device:s0 tclass=blk_file permissive=1

Bug: 378120929
Flag: build.RELEASE_PIXEL_VENDOR_INTELLIGENCE_AID
Change-Id: If9d2f067e29b6c574d3b827ea509fec92c6d8028
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2024-12-05 19:31:26 -08:00
..
tracking_denials Add Intelligence rc 2024-12-05 19:31:26 -08:00
charger_vendor.te storage: move sepolicy to common folder 2024-09-05 10:48:44 +08:00
device.te storage: move storage related device type to common folder 2024-09-04 10:43:47 +08:00
dump_storage.te storage: fix adb bugreport and refactor the existing rules 2024-09-05 16:39:22 +08:00
dumpstate.te storage: fix adb bugreport and refactor the existing rules 2024-09-05 16:39:22 +08:00
e2fs.te storage: fix adb bugreport and refactor the existing rules 2024-09-05 16:39:22 +08:00
fastbootd.te storage: fix adb bugreport and refactor the existing rules 2024-09-05 16:39:22 +08:00
file.te Add Intelligence rc 2024-12-05 19:31:26 -08:00
file_contexts Add Intelligence rc 2024-12-05 19:31:26 -08:00
fsck.te Storage: add sepolicy for recovery mode 2024-09-09 12:41:58 +08:00
genfs_contexts storage: fix adb bugreport and refactor the existing rules 2024-09-05 16:39:22 +08:00
hal_health_default.te storage: fix adb bugreport and refactor the existing rules 2024-09-05 16:39:22 +08:00
hal_health_storage_default.te storage: fix adb bugreport and refactor the existing rules 2024-09-05 16:39:22 +08:00
hal_power_stats_default.te storage: fix adb bugreport and refactor the existing rules 2024-09-05 16:39:22 +08:00
init.te Add Intelligence rc 2024-12-05 19:31:26 -08:00
kernel.te Add Intelligence rc 2024-12-05 19:31:26 -08:00
property.te Add Intelligence rc 2024-12-05 19:31:26 -08:00
property_contexts Add Intelligence rc 2024-12-05 19:31:26 -08:00
recovery.te storage: fix ota selinux error 2024-09-09 12:48:43 +08:00
storage_intelligence.te Add Intelligence rc 2024-12-05 19:31:26 -08:00
ufs_firmware_update.te storage: move storage related device type to common folder 2024-09-04 10:43:47 +08:00
vendor_init.te Add Intelligence rc 2024-12-05 19:31:26 -08:00
vold.te storage: fix vold avc denied 2024-09-05 08:42:25 +00:00