Merge "Fix avc denied for Silent Logging" into sc-dev am: 60a2a6c09b

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/14103373

Change-Id: I77f2d19f407e8b0e0bcda835885b50218da6ad1c
This commit is contained in:
TreeHugger Robot 2021-04-09 06:53:47 +00:00 committed by Automerger Merge Worker
commit 95d168126d
4 changed files with 16 additions and 6 deletions

View file

@ -29,3 +29,4 @@ add_hwservice(dmd, hal_vendor_oem_hwservice)
binder_call(dmd, hwservicemanager)
binder_call(dmd, modem_diagnostic_app)
binder_call(dmd, modem_logging_control)
binder_call(dmd, vendor_telephony_app)

View file

@ -45,8 +45,9 @@ vendor.cbd. u:object_r:vendor_cbd_prop:s0
persist.vendor.cbd. u:object_r:vendor_cbd_prop:s0
# for slog
vendor.sys.silentlog. u:object_r:vendor_slog_prop:s0
vendor.sys.exynos.slog. u:object_r:vendor_slog_prop:s0
vendor.sys.silentlog. u:object_r:vendor_slog_prop:s0
vendor.sys.exynos.slog. u:object_r:vendor_slog_prop:s0
persist.vendor.sys.silentlog u:object_r:vendor_slog_prop:s0
# for dmd
persist.vendor.sys.dm. u:object_r:vendor_diag_prop:s0

View file

@ -3,6 +3,7 @@ set_prop(vendor_init, vendor_modem_prop)
set_prop(vendor_init, vendor_cbd_prop)
set_prop(vendor_init, vendor_rild_prop)
set_prop(vendor_init, vendor_usb_config_prop)
set_prop(vendor_init, vendor_slog_prop)
set_prop(vendor_init, vendor_sys_default_prop)
set_prop(vendor_init, vendor_ims_prop)
set_prop(vendor_init, vendor_ssrdump_prop)

View file

@ -2,10 +2,17 @@ type vendor_telephony_app, domain;
app_domain(vendor_telephony_app)
get_prop(vendor_telephony_app, vendor_rild_prop)
get_prop(vendor_telephony_app, vendor_persist_sys_default_prop)
set_prop(vendor_telephony_app, vendor_persist_sys_default_prop)
set_prop(vendor_telephony_app, vendor_modem_prop)
set_prop(vendor_telephony_app, vendor_slog_prop)
r_dir_file(vendor_telephony_app, system_app_data_file)
r_dir_file(vendor_telephony_app, vendor_slog_file)
# [TODO] Need to check further about the system data permission
# allow vendor_telephony_app system_app_data_file:dir create_dir_perms;
# allow vendor_telephony_app system_app_data_file:file create_file_perms;
allow vendor_telephony_app vendor_slog_file:dir create_dir_perms;
allow vendor_telephony_app vendor_slog_file:file create_file_perms;
allow vendor_telephony_app app_api_service:service_manager find;
allow vendor_telephony_app hal_vendor_oem_hwservice:hwservice_manager find;
binder_call(vendor_telephony_app, dmd)