Fix selinux for vold idle-maint

Bug: 206741894
Bug: 207062776
Test: adb shell sm idle-maint run
Signed-off-by: Randall Huang <huangrandall@google.com>
Change-Id: Ieb55fe439d3250b6d819381c4bc97e3e895ac23f
This commit is contained in:
Randall Huang 2021-11-22 16:51:42 +08:00 committed by TreeHugger Robot
parent 8a4d5bd3b5
commit 1a57e5c346
4 changed files with 6 additions and 2 deletions

View file

@ -1,2 +0,0 @@
# b/207062540
dontaudit vold sysfs_scsi_devices_0000:file { write };

View file

@ -75,6 +75,7 @@ genfscon sysfs /devices/platform/14700000.ufs/hibern8_on_idle_enable u:object
genfscon sysfs /devices/platform/14700000.ufs/health_descriptor u:object_r:sysfs_scsi_devices_0000:s0 genfscon sysfs /devices/platform/14700000.ufs/health_descriptor u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/14700000.ufs/host0/target0:0:0/0:0:0: u:object_r:sysfs_scsi_devices_0000:s0 genfscon sysfs /devices/platform/14700000.ufs/host0/target0:0:0/0:0:0: u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/14700000.ufs/ufs_stats u:object_r:sysfs_scsi_devices_0000:s0 genfscon sysfs /devices/platform/14700000.ufs/ufs_stats u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/14700000.ufs/attributes/wb_avail_buf u:object_r:sysfs_scsi_devices_0000:s0
# debugfs # debugfs
genfscon debugfs /f2fs u:object_r:debugfs_f2fs:s0 genfscon debugfs /f2fs u:object_r:debugfs_f2fs:s0

View file

@ -0,0 +1,3 @@
# Access to /sys/devices/platform/14700000.ufs/*
allow hal_health_storage_default sysfs_scsi_devices_0000:dir r_dir_perms;
allow hal_health_storage_default sysfs_scsi_devices_0000:file rw_file_perms;

View file

@ -1,3 +1,5 @@
allow vold modem_efs_file:dir rw_dir_perms; allow vold modem_efs_file:dir rw_dir_perms;
allow vold modem_userdata_file:dir rw_dir_perms; allow vold modem_userdata_file:dir rw_dir_perms;
allow vold sysfs_scsi_devices_0000:file rw_file_perms;