Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Grant hal_weaver_citadel access to vndbinder and citadeld

Browse source 
Test: boot to home under enforcing mode
Bug: 205657092
Bug: 205904286
Change-Id: Ic6f46f0c827d202fd81fb744f4ec3241b24396d6
This commit is contained in:
Adam Shih 2022-01-03 10:32:22 +08:00 • committed by TreeHugger Robot
parent 70d78900fd
commit be9bc5e2da
2 changed files with 2 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

2
dauntless/hal_weaver_citadel.te
View file

@ -5,5 +5,7 @@ init_daemon_domain(hal_weaver_citadel)
hal_server_domain(hal_weaver_citadel, hal_weaver)
hal_server_domain(hal_weaver_citadel, hal_oemlock)
hal_server_domain(hal_weaver_citadel, hal_authsecret)
vndbinder_use(hal_weaver_citadel)
binder_call(hal_weaver_citadel, citadeld)
allow hal_weaver_citadel citadeld_service:service_manager find;

9
tracking_denials/hal_weaver_citadel.te
View file

@ -1,9 +0,0 @@
# b/205657092
dontaudit hal_weaver_citadel vndbinder_device:chr_file { ioctl };
dontaudit hal_weaver_citadel vndbinder_device:chr_file { map };
dontaudit hal_weaver_citadel vndbinder_device:chr_file { open };
dontaudit hal_weaver_citadel vndbinder_device:chr_file { read };
dontaudit hal_weaver_citadel vndbinder_device:chr_file { write };
# b/205904286
dontaudit hal_weaver_citadel citadeld:binder { call };
dontaudit hal_weaver_citadel vndservicemanager:binder { call };