Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix SELinux error from vendor_init

Browse source 
03-17 09:12:55.380     1     1 I /system/bin/init: type=1107 audit(0.0:3): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { read } for property=mfgapi.touchpanel.permission pid=0 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=1'

Bug: 182954248
Change-Id: I9ffff1aab20577950cb43c35d788e6a9c9acd571
This commit is contained in:
gillianlin 2021-03-31 16:41:41 +08:00 • committed by Gillian Lin
parent a7d3992396
commit 52a776889c
4 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tracking_denials/vendor_init.te
View file

@ -1,7 +1,5 @@
# b/176528557
dontaudit vendor_init debugfs_trace_marker:file { getattr };
# b/182954248
dontaudit vendor_init default_prop:file { read };
# b/183935443
dontaudit vendor_init system_data_file:dir { write };
dontaudit vendor_init system_data_file:dir { write };

3
whitechapel/vendor/google/property.te vendored
View file

@ -34,3 +34,6 @@ vendor_internal_prop(vendor_nfc_prop)
# WiFi
vendor_internal_prop(vendor_wifi_version)
# Touchpanel
vendor_internal_prop(vendor_touchpanel_prop)

3
whitechapel/vendor/google/property_contexts vendored
View file

@ -92,3 +92,6 @@ vendor.battery.defender. u:object_r:vendor_battery_defend
# WiFi
vendor.wlan.driver.version u:object_r:vendor_wifi_version:s0
vendor.wlan.firmware.version u:object_r:vendor_wifi_version:s0
# Touchpanel
vendor.mfgapi.touchpanel.permission u:object_r:vendor_touchpanel_prop:s0

1
whitechapel/vendor/google/vendor_init.te vendored
View file

@ -7,6 +7,7 @@ set_prop(vendor_init, vendor_sys_default_prop)
set_prop(vendor_init, vendor_ims_prop)
set_prop(vendor_init, vendor_ssrdump_prop)
set_prop(vendor_init, vendor_ro_config_default_prop)
get_prop(vendor_init, vendor_touchpanel_prop)
allow vendor_init proc_dirty:file w_file_perms;
allow vendor_init proc_sched:file write;