From 52a776889c37a72d44b7d0455f8bc16bf3756264 Mon Sep 17 00:00:00 2001 From: gillianlin Date: Wed, 31 Mar 2021 16:41:41 +0800 Subject: [PATCH] Fix SELinux error from vendor_init 03-17 09:12:55.380 1 1 I /system/bin/init: type=1107 audit(0.0:3): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { read } for property=mfgapi.touchpanel.permission pid=0 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=1' Bug: 182954248 Change-Id: I9ffff1aab20577950cb43c35d788e6a9c9acd571 --- tracking_denials/vendor_init.te | 2 -- whitechapel/vendor/google/property.te | 3 +++ whitechapel/vendor/google/property_contexts | 3 +++ whitechapel/vendor/google/vendor_init.te | 1 + 4 files changed, 7 insertions(+), 2 deletions(-) diff --git a/tracking_denials/vendor_init.te b/tracking_denials/vendor_init.te index 57a0570d..ecaffc0e 100644 --- a/tracking_denials/vendor_init.te +++ b/tracking_denials/vendor_init.te @@ -1,7 +1,5 @@ # b/176528557 dontaudit vendor_init debugfs_trace_marker:file { getattr }; -# b/182954248 -dontaudit vendor_init default_prop:file { read }; # b/183935443 dontaudit vendor_init system_data_file:dir { write }; dontaudit vendor_init system_data_file:dir { write }; diff --git a/whitechapel/vendor/google/property.te b/whitechapel/vendor/google/property.te index 55d06df7..6d9ce98c 100644 --- a/whitechapel/vendor/google/property.te +++ b/whitechapel/vendor/google/property.te @@ -34,3 +34,6 @@ vendor_internal_prop(vendor_nfc_prop) # WiFi vendor_internal_prop(vendor_wifi_version) + +# Touchpanel +vendor_internal_prop(vendor_touchpanel_prop) diff --git a/whitechapel/vendor/google/property_contexts b/whitechapel/vendor/google/property_contexts index cfe71e25..20bd556c 100644 --- a/whitechapel/vendor/google/property_contexts +++ b/whitechapel/vendor/google/property_contexts @@ -92,3 +92,6 @@ vendor.battery.defender. u:object_r:vendor_battery_defend # WiFi vendor.wlan.driver.version u:object_r:vendor_wifi_version:s0 vendor.wlan.firmware.version u:object_r:vendor_wifi_version:s0 + +# Touchpanel +vendor.mfgapi.touchpanel.permission u:object_r:vendor_touchpanel_prop:s0 diff --git a/whitechapel/vendor/google/vendor_init.te b/whitechapel/vendor/google/vendor_init.te index 48ae4e78..a5b7082b 100644 --- a/whitechapel/vendor/google/vendor_init.te +++ b/whitechapel/vendor/google/vendor_init.te @@ -7,6 +7,7 @@ set_prop(vendor_init, vendor_sys_default_prop) set_prop(vendor_init, vendor_ims_prop) set_prop(vendor_init, vendor_ssrdump_prop) set_prop(vendor_init, vendor_ro_config_default_prop) +get_prop(vendor_init, vendor_touchpanel_prop) allow vendor_init proc_dirty:file w_file_perms; allow vendor_init proc_sched:file write;