Evolution-X-Tensor/device_google_lynx
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add sepolicy for hal_wifi_ext

Browse source 
07-27 11:58:09.569   869   869 I auditd  : type=1400 audit(0.0:2682598):
avc: denied { read } for comm="wifi_ext@1.0-se" name="driverdump" dev="proc"
ino=4026535980 scontext=u:r:hal_wifi_ext:s0 tcontext=u:object_r:proc:s0
tclass=file permissive=0

Bug: 239656339
Test: avc error is gone
Change-Id: Icf816897780fecc1bb35696e492e6fa2661abc20
This commit is contained in:
Hsiu-Chang Chen 2022-07-27 13:35:04 +08:00 • committed by TreeHugger Robot
parent 20deb31861
commit 0c59021e58
3 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
vendor/hal_wifi_ext.te vendored
View file

@ -11,3 +11,6 @@ allow hal_wifi_ext lowi_server:unix_dgram_socket sendto;
unix_socket_connect(hal_wifi, vendor_location, vendor_location)
allow hal_wifi_ext vendor_wifihal_socket:dir rw_dir_perms;
allow hal_wifi_ext vendor_wifihal_socket:sock_file create_file_perms;
# allow hal_wifi to write into /proc/debugdriver/driverdump
r_dir_file(hal_wifi_ext, vendor_proc_wifi_dbg);