Fix MMAP audio avc denied

03-30 16:45:16.840   738   738 I auditd  : type=1400 audit(0.0:76): avc:
denied { read } for comm="HwBinder:738_2"
name="u:object_r:audio_prop:s0" dev="tmpfs" ino=87
scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:audio_prop:s0
tclass=file permissive=0
03-30 16:45:16.980   644   644 I auditd  : type=1400 audit(0.0:78): avc:
denied { map } for comm="audioserver" path="/dev/snd/pcmC0D0p"
dev="tmpfs" ino=977 scontext=u:r:audioserver:s0
tcontext=u:object_r:audio_device:s0 tclass=chr_file permissive=0

Bug: 165737390
Test: verified with the forrest ROM and error log gone
Change-Id: I1c8721a051844d3410cffa23411a434c832b416e
This commit is contained in:
millerliang 2021-03-30 09:10:37 +00:00
parent 6bcc46cec5
commit f01cb384d8
2 changed files with 3 additions and 0 deletions

View file

@ -0,0 +1,2 @@
# allow access to ALSA MMAP FDs for AAudio API
allow audioserver audio_device:chr_file r_file_perms;

View file

@ -66,6 +66,7 @@ persist.vendor.sys. u:object_r:vendor_persist_sys_default_prop:s0
# for audio # for audio
vendor.audio_hal.period_multiplier u:object_r:vendor_audio_prop:s0 vendor.audio_hal.period_multiplier u:object_r:vendor_audio_prop:s0
vendor.audiodump.enable u:object_r:vendor_audio_prop:s0 vendor.audiodump.enable u:object_r:vendor_audio_prop:s0
persist.vendor.audio. u:object_r:vendor_audio_prop:s0
# for display # for display
ro.vendor.hwc.drm.device u:object_r:vendor_display_prop:s0 ro.vendor.hwc.drm.device u:object_r:vendor_display_prop:s0