From d140706db9bc8c39b9e560741db28b9e7cbab068 Mon Sep 17 00:00:00 2001 From: Rick Chen Date: Tue, 8 Nov 2022 22:41:26 +0800 Subject: [PATCH] Allow CHRE to use EPOLLWAKEUP avc: denied { block_suspend } for comm="UsfTransport" capability=36 scontext=u:r:chre:s0 tcontext=u:r:chre:s0 tclass=capability2 permissive=0 Bug: 238666865 Test: Check no chre avc denied. Change-Id: Ifd2c37c58c548aec46a2c46891a1fc4d1f83f9be Signed-off-by: Rick Chen --- whitechapel/vendor/google/chre.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/whitechapel/vendor/google/chre.te b/whitechapel/vendor/google/chre.te index 7cedce68..2531af89 100644 --- a/whitechapel/vendor/google/chre.te +++ b/whitechapel/vendor/google/chre.te @@ -27,3 +27,5 @@ binder_call(chre, stats_service_server) # Allow CHRE to use WakeLock wakelock_use(chre) +# Allow CHRE to block suspend, which is required to use EPOLLWAKEUP. +allow chre self:global_capability2_class_set block_suspend;