Fix SELinux error coming from hal_secure_element_uicc

12-02 09:45:55.564   796   796 I secure_element@: type=1400 audit(0.0:3): avc: denied { call } for scontext=u:r:hal_secure_element_uicc:s0 tcontext=u:r:rild:s0 tclass=binder permissive=1
[   11.030503] type=1400 audit(1638409555.564:3): avc: denied { call } for comm="secure_element@" scontext=u:r:hal_secure_element_uicc:s0 tcontext=u:r:rild:s0 tclass=binder permissive=1

Bug: 208715886
Test: check avc
Change-Id: I701b36fbb58f1c071f1dbc394048dad467ac6c4c
This commit is contained in:
George Chang 2021-12-02 11:03:07 +08:00
parent ad3e880a3f
commit b2d162fda7
2 changed files with 2 additions and 4 deletions

View file

@ -1,2 +0,0 @@
# b/208715886
dontaudit hal_secure_element_uicc rild:binder { call };

View file

@ -4,8 +4,8 @@ type hal_secure_element_uicc_exec, exec_type, vendor_file_type, file_type;
hal_server_domain(hal_secure_element_uicc, hal_secure_element) hal_server_domain(hal_secure_element_uicc, hal_secure_element)
init_daemon_domain(hal_secure_element_uicc) init_daemon_domain(hal_secure_element_uicc)
# Allow hal_secure_element_default to access rild # Allow hal_secure_element_uicc to access rild
binder_call(hal_secure_element_default, rild); binder_call(hal_secure_element_uicc, rild);
allow hal_secure_element_uicc hal_exynos_rild_hwservice:hwservice_manager find; allow hal_secure_element_uicc hal_exynos_rild_hwservice:hwservice_manager find;