From 076dee1318a70809f98dca91f1cb13871481790d Mon Sep 17 00:00:00 2001 From: Nikhil Kumar Date: Thu, 29 Jun 2023 14:26:40 +0100 Subject: [PATCH 1/2] Tracked SELinux denials for HSUM tangorpro mode Bug: 289358324 Test: Run the boot health test to verify if the Denials are ignored. Change-Id: I74063ed1634dc4b9bff524203e537b0dfc36b02e --- tracking_denials/bug_map | 1 + 1 file changed, 1 insertion(+) diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index c77f421..affe07f 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -2,3 +2,4 @@ hal_camera_default boot_status_prop file b/275001805 hal_camera_default edgetpu_app_service service_manager b/275001805 hal_dumpstate_default modem_stat_data_file dir b/239115418 shell sysfs_touch dir b/264823366 +platform_app system_data_file dir b/289358324 From 1ef0169b1f2bc4bb9674c5bf96b43e29e179d68f Mon Sep 17 00:00:00 2001 From: eddielan Date: Tue, 8 Aug 2023 17:37:51 +0800 Subject: [PATCH 2/2] Correct fps sepolicy error E SELinux : avc: denied { find } name=android.frameworks.sensorservice.ISensorManager/default scontext=u:r:hal_fingerprint_capacitance:s0 tcontext=u:object_r:fwk_sensor_service:s0 tclass=service_manager permissive=0 Bug: 294959986 Test: make selinux_policy -j128 Change-Id: I987349032bdf7b79e1985a321949987860a08098 --- fingerprint_capacitance/hal_fingerprint_capacitance.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fingerprint_capacitance/hal_fingerprint_capacitance.te b/fingerprint_capacitance/hal_fingerprint_capacitance.te index 632086a..f35912f 100644 --- a/fingerprint_capacitance/hal_fingerprint_capacitance.te +++ b/fingerprint_capacitance/hal_fingerprint_capacitance.te @@ -36,4 +36,4 @@ hwbinder_use(hal_fingerprint_capacitance) add_hwservice(hal_fingerprint_capacitance, hal_fingerprint_capacitance_ext_hwservice) # allow fingerprint to access fwk sensor hwservice -allow hal_fingerprint_capacitance fwk_sensor_hwservice:hwservice_manager find; +allow hal_fingerprint_capacitance fwk_sensor_service:service_manager find;