Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix avc denials for powerhal

Browse source 
Test: build pass
Bug: 208909174
Signed-off-by: chungkai <chungkai@google.com>
Change-Id: I565df75c22d66199e6966dfac4af2e19b88606a0
This commit is contained in:
chungkai 2021-12-06 11:26:51 +00:00 • committed by Chung-Kai (Michael) Mei
parent 8b48664bdc
commit 7fe7e43582
4 changed files with 9 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tracking_denials/hal_power_default.te
View file

@ -1,9 +1,3 @@
# b/207062564
dontaudit hal_power_default sysfs:file { open };
dontaudit hal_power_default sysfs:file { write };
# b/208909174
dontaudit hal_power_default hal_power_default:capability { dac_read_search };
dontaudit hal_power_default sysfs:file { getattr };
dontaudit hal_power_default sysfs:file { read };
dontaudit hal_power_default sysfs_vendor_sched:file { getattr };
dontaudit hal_power_default sysfs_vendor_sched:file { read };

3
whitechapel_pro/file.te
View file

@ -83,3 +83,6 @@ type modem_userdata_file, file_type;
# SecureElement
type sysfs_st33spi, sysfs_type, fs_type;
# GPU
type sysfs_gpu, sysfs_type, fs_type;

3
whitechapel_pro/genfs_contexts
View file

@ -27,6 +27,9 @@ genfscon sysfs /devices/platform/acpm_stats u
# Broadcom
genfscon sysfs /module/bcmdhd4389 u:object_r:sysfs_bcmdhd:s0
# GPU
genfscon sysfs /devices/platform/28000000.mali/hint_min_freq u:object_r:sysfs_gpu:s0
# Fabric
genfscon sysfs /devices/platform/17000010.devfreq_mif/devfreq/17000010.devfreq_mif/min_freq u:object_r:sysfs_fabric:s0

3
whitechapel_pro/hal_power_default.te
View file

@ -2,4 +2,5 @@ allow hal_power_default sysfs_scsi_devices_0000:file rw_file_perms;
allow hal_power_default sysfs_fs_f2fs:dir r_dir_perms;
allow hal_power_default sysfs_fs_f2fs:file rw_file_perms;
allow hal_power_default sysfs_display:file rw_file_perms;
allow hal_power_default sysfs_vendor_sched:file r_file_perms;
allow hal_power_default sysfs_gpu:file rw_file_perms;