Evolution-X-Tensor/device_google_zuma
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix euiccpixel_app SELinux error for eSIM firmware upgrade

Browse source 
bug: 265286368

Test: generate test build and confirm no avc error happens
Change-Id: I2f457157d92cb48dfe328ba1520c3e598bd6d6b6
This commit is contained in:
Welly Hsu 2022-12-15 17:50:06 +08:00
parent e8f6804674
commit 48ef4308be
2 changed files with 18 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tracking_denials/euiccpixel_app.te
View file

@ -63,6 +63,8 @@ dontaudit euiccpixel_app tombstoned:unix_stream_socket { connectto };
dontaudit euiccpixel_app tombstoned_java_trace_socket:sock_file { write };
# b/262451641
dontaudit euiccpixel_app permission_checker_service:service_manager { find };
# b/265286368
dontaudit euiccpixel_app default_android_service:service_manager { find };
# b/264489745
userdebug_or_eng(`
permissive euiccpixel_app;

18
vendor/euiccpixel_app.te vendored
View file

@ -1,4 +1,18 @@
# EuiccSupportPixel app
type euiccpixel_app, domain;
app_domain(euiccpixel_app)
allow euiccpixel_app app_api_service:service_manager find;
allow euiccpixel_app radio_service:service_manager find;
allow euiccpixel_app nfc_service:service_manager find;
set_prop(euiccpixel_app, vendor_secure_element_prop)
set_prop(euiccpixel_app, vendor_modem_prop)
get_prop(euiccpixel_app, dck_prop)
userdebug_or_eng(`
net_domain(euiccpixel_app)
# Access to directly upgrade firmware on st54spi_device used for engineering devices
typeattribute st54spi_device mlstrustedobject;
allow euiccpixel_app st54spi_device:chr_file rw_file_perms;
')