From 35112bba62a73e3517f9ba70011b6050db3019af Mon Sep 17 00:00:00 2001 From: Roger Fang Date: Wed, 2 Nov 2022 16:31:48 +0800 Subject: [PATCH 1/2] [DO NOT MERGE] sepolicy: add permission for CCA rate of pixelstats-vend pixelstats-vend: type=1400 audit(0.0:7): avc: denied { read } for name="cca_rate_read_once" dev="sysfs" ino=100809 scontext=u:r:pixelstats_vendor:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 Bug: 249225148 Test: Manually test passed Change-Id: I802b79417cd9ce23386bb62eccb151610bfb8ac1 Signed-off-by: Roger Fang --- aoc/genfs_contexts | 1 + 1 file changed, 1 insertion(+) diff --git a/aoc/genfs_contexts b/aoc/genfs_contexts index abfc5a99..f474c77b 100644 --- a/aoc/genfs_contexts +++ b/aoc/genfs_contexts @@ -27,4 +27,5 @@ genfscon sysfs /devices/platform/audiometrics/mic_broken_degrade u:ob genfscon sysfs /devices/platform/audiometrics/codec_crashed_counter u:object_r:sysfs_pixelstats:s0 genfscon sysfs /devices/platform/audiometrics/hwinfo_part_number u:object_r:sysfs_pixelstats:s0 genfscon sysfs /devices/platform/audiometrics/ams_rate_read_once u:object_r:sysfs_pixelstats:s0 +genfscon sysfs /devices/platform/audiometrics/cca_rate_read_once u:object_r:sysfs_pixelstats:s0 From 8427e1db8de95939cd72131cdf30b46e64333d4b Mon Sep 17 00:00:00 2001 From: George Lee Date: Mon, 7 Nov 2022 16:57:22 -0800 Subject: [PATCH 2/2] betterbug: Fixed sepolicy related to File [DO NOT MERGE] Added File Attachment sepolicy for betterbug Bug: 237287659 Test: Attach files from local directory and confirm it can be attached. Signed-off-by: George Lee Change-Id: Ie2ee163794a4b955915a1b62b12d5aa625931034 --- whitechapel_pro/better_bug_app.te | 1 + 1 file changed, 1 insertion(+) diff --git a/whitechapel_pro/better_bug_app.te b/whitechapel_pro/better_bug_app.te index 41d403b8..6813024b 100644 --- a/whitechapel_pro/better_bug_app.te +++ b/whitechapel_pro/better_bug_app.te @@ -3,6 +3,7 @@ type better_bug_app, domain, coredomain; userdebug_or_eng(` app_domain(better_bug_app) net_domain(better_bug_app) + allow better_bug_app shell_data_file:file read; allow better_bug_app app_api_service:service_manager find; allow better_bug_app system_api_service:service_manager find; allow better_bug_app privapp_data_file:file execute;