From be2e1b2edee58a3c3fc8298c9bae97fc45a2a607 Mon Sep 17 00:00:00 2001 From: Amith Dsouza Date: Tue, 1 Nov 2022 04:01:49 +0000 Subject: [PATCH] Fix untracked SELinux denials on boot Error: avc: denied { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:platform_app:s0:c512,c768 pid=2641 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0 Bug: 254453654 Test: Flash device, rebuild driver blobs, check logs after boot Change-Id: I43d524f781c1dda1d3d5291f661bc549fdbb99d6 --- whitechapel_pro/platform_app.te | 3 +++ whitechapel_pro/rild.te | 1 + 2 files changed, 4 insertions(+) diff --git a/whitechapel_pro/platform_app.te b/whitechapel_pro/platform_app.te index 356167ab..9021c1a8 100644 --- a/whitechapel_pro/platform_app.te +++ b/whitechapel_pro/platform_app.te @@ -1,3 +1,6 @@ +binder_call(platform_app, rild) +allow platform_app hal_exynos_rild_hwservice:hwservice_manager find; + allow platform_app hal_pixel_display_service:service_manager find; allow platform_app hal_wlc_hwservice:hwservice_manager find; allow platform_app nfc_service:service_manager find; diff --git a/whitechapel_pro/rild.te b/whitechapel_pro/rild.te index d8c8c290..db749f41 100644 --- a/whitechapel_pro/rild.te +++ b/whitechapel_pro/rild.te @@ -16,6 +16,7 @@ allow rild mnt_vendor_file:dir r_dir_perms; r_dir_file(rild, modem_img_file) +binder_call(rild, platform_app) binder_call(rild, bipchmgr) binder_call(rild, gpsd) binder_call(rild, hal_audio_default)