device_google_gs101/tracking_denials
wenchangliu b52121a259 Add sepolicy for MFC device
- Add sysfs_video type for mfc device
- Allow mediacode to access sysfs_video

avc: denied { read } for name="name" dev="sysfs" ino=62278 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { open } for path="/sys/devices/platform/mfc/video4linux/video7/name" \
dev="sysfs" ino=62278 scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { getattr } for path="/sys/devices/platform/mfc/video4linux/video7/name" \
dev="sysfs" ino=62278 scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { read } for name="name" dev="sysfs" ino=62230 \
scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { open } for path="/sys/devices/platform/mfc/video4linux/video6/name" \
dev="sysfs" ino=62230 scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

avc: denied { getattr } for path="/sys/devices/platform/mfc/video4linux/video6/name" \
dev="sysfs" ino=62230 scontext=u:r:mediacodec:s0 tcontext=u:object_r:sysfs:s0 \
tclass=file permissive=1

Bug: 172173484
Test: video playback / camera recording with enforcing mode
Change-Id: Id7f43fe11c9ed089067f43a50d7f765df873d6c6
2021-03-12 10:51:41 +08:00
..
aocd.te update error on ROM 7193586 2021-03-09 09:53:59 +08:00
bootanim.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
cbd.te cbd: Fix avc errors 2021-03-10 13:33:43 +00:00
dumpstate.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
gmscore_app.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
gpsd.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_camera_default.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_dumpstate_default.te dumpstate: allow dumpstate to access displaycolor 2021-03-09 19:06:24 +08:00
hal_fingerprint_default.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_graphics_composer_default.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_health_default.te hal_health_default: Fix avc denials 2021-03-10 14:13:38 +08:00
hal_memtrack_default.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_neuralnetworks_armnn.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_power_default.te remove obsolete entries and put crucial domains to permissive 2021-03-09 13:46:42 +08:00
hal_power_stats_default.te hal_power_stats_default: Fix avc denials 2021-03-09 14:21:20 +00:00
hal_sensors_default.te update error on ROM 7191013 2021-03-08 09:42:05 +08:00
hal_vibrator_default.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_wifi_ext.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hardware_info_app.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
incidentd.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
init-insmod-sh.te update error on ROM 7191013 2021-03-08 09:42:05 +08:00
init-thermal-symlinks-sh.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
init.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
modem_logging_control.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
pixelstats_vendor.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
platform_app.te Remove dma_buf_heap tracking_denials 2021-03-09 02:42:56 +00:00
priv_app.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
rild.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
scd.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
sced.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
servicemanager.te update error on ROM 7191013 2021-03-08 09:42:05 +08:00
shell.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
surfaceflinger.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
system_app.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
system_server.te Remove dma_buf_heap tracking_denials 2021-03-09 02:42:56 +00:00
tee.te remove obsolete entries and put crucial domains to permissive 2021-03-09 13:46:42 +08:00
trusty_apploader.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
untrusted_app.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
untrusted_app_25.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
update_engine.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
vendor_init.te vendor_init: Update tracking denials 2021-03-10 13:33:19 +00:00