device_google_gs101/private
Rick Yiu 4075287498 gs101-sepolicy: Fix avc denials
Fix below and other potential denials

11-21 10:10:43.984  3417  3417 I auditd  : type=1400 audit(0.0:4): avc: denied { write } for comm=4173796E635461736B202332 path="/sys/kernel/vendor_sched/set_task_group_fg" dev="sysfs" ino=44511 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:sysfs_vendor_sched:s0 tclass=file permissive=0 app=com.google.android.pixel.setupwizard

11-21 10:10:44.840  3976  3976 I auditd  : type=1400 audit(0.0:10): avc: denied { write } for comm="StallDetector-1" path="/sys/kernel/vendor_sched/set_task_group_fg" dev="sysfs" ino=44511 scontext=u:r:untrusted_app_30:s0:c170,c256,c512,c768 tcontext=u:object_r:sysfs_vendor_sched:s0 tclass=file permissive=0 app=com.google.android.inputmethod.latin

11-21 18:10:51.280  5595  5595 I auditd  : type=1400 audit(0.0:102): avc: denied { write } for comm="SharedPreferenc" path="/sys/kernel/vendor_sched/set_task_group_fg" dev="sysfs" ino=44511 scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:object_r:sysfs_vendor_sched:s0 tclass=file permissive=0 app=com.google.android.gms

Bug: 206970384
Test: make selinux_policy pass
Change-Id: I7c981ef0516dc5be93ec825768de57c15786b4bd
2021-11-25 14:26:35 +00:00
..
dex2oat.te update error on ROM 7331131 2021-05-03 15:48:46 +08:00
fsverity_init.te suppress error for ag/15263334 2021-07-13 09:57:18 +08:00
gmscore_app.te gs101-sepolicy: Fix avc denials 2021-11-25 14:26:35 +00:00
hal_dumpstate_default.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
incidentd.te Revert "Update avc error on ROM 7522385" 2021-07-09 15:51:12 +01:00
lpdumpd.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
permissioncontroller_app.te gs101-sepolicy: Fix avc denial for permissioncontroller_app 2021-06-11 18:41:10 +08:00
postinstall_dexopt.te Update avc error on ROM 7562467 2021-07-20 10:03:30 +08:00
priv_app.te gs101-sepolicy: Fix avc denials 2021-11-25 14:26:35 +00:00
radio.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
service_contexts Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
untrusted_app_25.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
wait_for_keymaster.te Update avc error on ROM 7358093 2021-05-14 14:23:22 +08:00