Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Keymint: Fix SELinux denial

Browse source 
Also remove -dontaudit- configuration.

Bug: 205073229
Bug: 205655569
Bug: 205904323
Change-Id: If8de3b4e6ee01488fdd563b702fbba1bd7c73ef0
This commit is contained in:
Tommy Chiu 2021-11-15 10:47:46 +00:00 • committed by TreeHugger Robot
parent 8423a70e12
commit 94f78934d9
2 changed files with 4 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

7
dauntless/hal_keymint_citadel.te
View file

@ -1,8 +1,9 @@
type hal_keymint_citadel, domain; type hal_keymint_citadel, domain;
type hal_keymint_citadel_exec, exec_type, vendor_file_type, file_type; type hal_keymint_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_keymint_citadel)
hal_server_domain(hal_keymint_citadel, hal_keymint) hal_server_domain(hal_keymint_citadel, hal_keymint)
init_daemon_domain(hal_keymint_citadel)
vndbinder_use(hal_keymint_citadel)
get_prop(hal_keymint_citadel, vendor_security_patch_level_prop)
allow hal_keymint_citadel citadeld_service:service_manager find; allow hal_keymint_citadel citadeld_service:service_manager find;
binder_call(hal_keymint_citadel, citadeld)

14
tracking_denials/hal_keymint_citadel.te
View file

@ -1,14 +0,0 @@
# b/205073229
dontaudit hal_keymint_citadel vendor_security_patch_level_prop:file { getattr };
dontaudit hal_keymint_citadel vendor_security_patch_level_prop:file { map };
dontaudit hal_keymint_citadel vendor_security_patch_level_prop:file { open };
dontaudit hal_keymint_citadel vendor_security_patch_level_prop:file { read };
# b/205655569
dontaudit hal_keymint_citadel vndbinder_device:chr_file { ioctl };
dontaudit hal_keymint_citadel vndbinder_device:chr_file { map };
dontaudit hal_keymint_citadel vndbinder_device:chr_file { open };
dontaudit hal_keymint_citadel vndbinder_device:chr_file { read };
dontaudit hal_keymint_citadel vndbinder_device:chr_file { write };
# b/205904323
dontaudit hal_keymint_citadel citadeld:binder { call };
dontaudit hal_keymint_citadel vndservicemanager:binder { call };