device_google_gs101/tracking_denials
Aaron Tsai d135bde241 Fix selinux errors for rild
03-10 09:33:20.380   849   849 I rild_exynos: type=1400 audit(0.0:11): avc: denied { map } for path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
03-10 09:33:20.380   849   849 I rild_exynos: type=1400 audit(0.0:10): avc: denied { getattr } for path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
03-10 09:33:20.380   849   849 I rild_exynos: type=1400 audit(0.0:9): avc: denied { open } for path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
03-10 09:33:20.380   849   849 I rild_exynos: type=1400 audit(0.0:8): avc: denied { read } for name="u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
[   16.814981] type=1400 audit(1615340000.380:8): avc: denied { read } for comm="rild_exynos" name="u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
[   16.815057] type=1400 audit(1615340000.380:9): avc: denied { open } for comm="rild_exynos" path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
[   16.815089] type=1400 audit(1615340000.380:10): avc: denied { getattr } for comm="rild_exynos" path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1
[   16.815108] type=1400 audit(1615340000.380:11): avc: denied { map } for comm="rild_exynos" path="/dev/__properties__/u:object_r:sota_prop:s0" dev="tmpfs" ino=241 scontext=u:r:rild:s0 tcontext=u:object_r:sota_prop:s0 tclass=file permissive=1

Bug: 182320172
Test: verified with the forrest ROM and error log gone
Change-Id: Ib0300629de5a0186c4f9fd2f603be52aefd085bc
2021-03-25 02:47:16 +00:00
..
aocd.te update error on ROM 7193586 2021-03-09 09:53:59 +08:00
crash_dump.te update error on ROM 7230950 2021-03-24 10:03:35 +08:00
dumpstate.te allow df to collect partition info 2021-03-15 11:00:41 +08:00
edgetpu_server.te update error on ROM 7216638 2021-03-18 10:03:37 +08:00
flags_health_check.te update error on ROM 7228492 2021-03-23 15:11:24 +08:00
gmscore_app.te update error on ROM 7230950 2021-03-24 10:03:35 +08:00
gpsd.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_camera_default.te update error on ROM 7207833 2021-03-15 09:26:46 +08:00
hal_dumpstate_default.te dumpstate: allow dumpstate to access displaycolor 2021-03-09 19:06:24 +08:00
hal_fingerprint_default.te update error on ROM 7225160 2021-03-22 09:52:45 +08:00
hal_memtrack_default.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_neuralnetworks_armnn.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
hal_neuralnetworks_darwinn.te update error on ROM 7202683 2021-03-12 11:18:10 +08:00
hal_power_default.te remove obsolete entries and put crucial domains to permissive 2021-03-09 13:46:42 +08:00
hardware_info_app.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
incidentd.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
init-insmod-sh.te label kernel modules and grant bt permission 2021-03-10 10:36:45 +08:00
init.te update error on ROM 7213588 2021-03-17 10:15:02 +08:00
kernel.te work around for uwb 2021-03-24 00:41:27 +00:00
pixelstats_vendor.te update error on ROM 7225160 2021-03-22 09:52:45 +08:00
priv_app.te update error on ROM 7219510 2021-03-19 10:52:09 +08:00
sced.te Clean up the obsoleted dontaudit rules 2021-03-15 06:24:59 +00:00
servicemanager.te update error on ROM 7191013 2021-03-08 09:42:05 +08:00
shell.te Clean up the obsoleted dontaudit rules 2021-03-15 06:24:59 +00:00
surfaceflinger.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
tee.te remove obsolete entries and put crucial domains to permissive 2021-03-09 13:46:42 +08:00
trusty_apploader.te update error on ROM 7213588 2021-03-17 10:15:02 +08:00
untrusted_app.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
update_engine.te Move slider-sepolicy into gs101-sepolicy 2021-03-06 16:15:39 +08:00
vendor_init.te vendor_init: Update tracking denials 2021-03-24 03:49:03 +00:00