diff --git a/radio/certs/com_google_android_modem_pms.x509.pem b/radio/certs/com_google_android_modem_pms.x509.pem new file mode 100644 index 0000000..27b5f75 --- /dev/null +++ b/radio/certs/com_google_android_modem_pms.x509.pem @@ -0,0 +1,29 @@ +-----BEGIN CERTIFICATE----- +MIIF9DCCA9ygAwIBAgIUdblfv7oNBrd5Bh3HcvmyFOTotxowDQYJKoZIhvcNAQELBQAwgYkxCzAJ +BgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRQw +EgYDVQQKEwtHb29nbGUgSW5jLjEQMA4GA1UECxMHQW5kcm9pZDElMCMGA1UEAwwcY29tX2dvb2ds +ZV9hbmRyb2lkX21vZGVtX3BtczAgFw0yNDA4MTkxODEwMjdaGA8yMDU0MDgxOTE4MTAyN1owgYkx +CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3 +MRQwEgYDVQQKEwtHb29nbGUgSW5jLjEQMA4GA1UECxMHQW5kcm9pZDElMCMGA1UEAwwcY29tX2dv +b2dsZV9hbmRyb2lkX21vZGVtX3BtczCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALe5 +J/LkcvdP1z2FUDUBW2V37s4FyMe8d5a7YEkji7hC5l/W9nCnLVplhqxAD6fU10T3W8xKvbxyfu4I +MvNJvzxlgzTNUJkVa+cbYDfnJd4lboF0NdJFIpYxNVFC1us96qcEwxEUWN0evamqawOUv7S4cwA4 +mwsh5zZcOL5217ytSO+88tvXIongGZXyhHN4iTbd2//R23Ia4s39zNVlEMcgExWBRyn1PEcO3LBn +4/SK/jnYRdZrHjKK1qkeTMYPu21NqcBJISAdjDbwnHuBjQp+hbd4XY3QROJM6LJ4J34PpbskyvIy +tU1VShZ+CV2P3RSkTk1L0K4IqHa3OzD4EtRvARHmggjieokWOIKfyklYRE1e/C4XbhNbj08cD2hR +orFNF2inbVpUVfBa3MJyOLTitnU9bTkprO1C63xXoXfSocbEgtSSl94PJjDVrpB8JiAjnrGUItSS +2+pW5J5pxREFMPxp7fOCOFoiD/gHgOJjHNWEPFdSWLcEe4trrAPLexbfBmtVFJ4lLXhzg1ERxEJJ +QriZ4FoAtB6XSILDJgXxe6xtoJ0fZDxp0FWaTIU2rRR/OOjjPEGzrSzfZjgeIj512qhaYiqfwSQ4 +i6cTEz1+UY/u9sFeW2N884VAWi1ZIx1kzYMUisAeehJXzlJFB+q0qinaoCwyFRcOOK144E8RAgMB +AAGjUDBOMAwGA1UdEwQFMAMBAf8wHQYDVR0OBBYEFCpkoCKwoSargw1pVZUVLuoKSQOdMB8GA1Ud +IwQYMBaAFCpkoCKwoSargw1pVZUVLuoKSQOdMA0GCSqGSIb3DQEBCwUAA4ICAQCRmyU23cp/ysn+ +ndfZekfNZJmktrY9W7WZ2kKuH0w/L/Y2HO9fg4HKHzfElJeSBgt7z3DkQ8exaCHdwGo4Inu8Yyjp +NgS0Zhfsa/yyORpvu5m62KFhT2x3gDKSTdPlP1z6pi3ADt3XtUOHoVgakM0YhRPvS/5epJOH5lgE +ONCExGiUUD5S7vgabda4R7jBmsDcIh9fsER9IQrlP1IN4auqbKfpVOd3yxNMcfg5WN+QvBA3lh3E ++hsQb1/SCUhOoXIzs7hfiy6hLMQx0wg/s2Zdc5h/8eQAgLhm0aELfq5Bm4IR6uxArwLkaBO4sEh0 +I+7eTNR/Z0fu5V6H1zdRupoZmXjlgqR6t9eAwxHqQfHJzUASBCmrXfnXDG4kdwiZz8dDCXvNxahS +YM7PB3gozD3mc/NGs6qjv/11Bu3gSaoXFPBDWxCJ99SPU1yp6e/pLqfqzQ1raijJWehqZudBU3vR +1VVN9Iw0KP3/RpT1fLJqoXMK/QUjQF/JURGDhLZqPqx+RNGGlhWYx/j0LJNFJMMwusTCd9l5DtiK +eGjXj6Z9zde1wrqKDjrY+kHWNwHeoDjX8MrQb36KzkJNFIY8eHS7tki0ATTgeBsfmiDusWpSJu2Q +9pnrCJYpoS3IXDwiDTf/6l41Bl1VLDZZm/K0mzALzynTrqhut310/RB+wUD2nw== +-----END CERTIFICATE----- diff --git a/radio/file_contexts b/radio/file_contexts index 42086a3..34e7e8b 100644 --- a/radio/file_contexts +++ b/radio/file_contexts @@ -10,7 +10,6 @@ /vendor/bin/cbd u:object_r:cbd_exec:s0 /vendor/bin/hw/rild_exynos u:object_r:rild_exec:s0 /vendor/bin/liboemservice_proxy_default u:object_r:liboemservice_proxy_default_exec:s0 -/vendor/bin/shared_modem_platform u:object_r:modem_svc_sit_exec:s0 /vendor/bin/copy_efs_files_to_data u:object_r:copy_efs_files_to_data_exec:s0 # Config files diff --git a/radio/keys.conf b/radio/keys.conf index 45db97d..baa99df 100644 --- a/radio/keys.conf +++ b/radio/keys.conf @@ -1,3 +1,6 @@ [@MDS] ALL : device/google/zumapro-sepolicy/radio/certs/com_google_mds.x509.pem +[@PMS] +ALL : device/google/zumapro-sepolicy/radio/certs/com_google_android_modem_pms.x509.pem + diff --git a/radio/mac_permissions.xml b/radio/mac_permissions.xml index 4b997c2..47bdf39 100644 --- a/radio/mac_permissions.xml +++ b/radio/mac_permissions.xml @@ -24,4 +24,7 @@ + + + diff --git a/radio/modem_diagnostic_app.te b/radio/modem_diagnostic_app.te index 60835a5..fb0bfea 100644 --- a/radio/modem_diagnostic_app.te +++ b/radio/modem_diagnostic_app.te @@ -1,3 +1,4 @@ +# Selinux rule for ModemDiagnosticService (MDS) app type modem_diagnostic_app, domain; app_domain(modem_diagnostic_app) @@ -10,6 +11,7 @@ userdebug_or_eng(` allow modem_diagnostic_app sysfs_modem_state:file r_file_perms; hal_client_domain(modem_diagnostic_app, hal_power_stats); + hal_client_domain(modem_diagnostic_app, hal_shared_modem_platform); allow modem_diagnostic_app hal_vendor_radio_external_service:service_manager find; allow modem_diagnostic_app hal_exynos_rild_hwservice:hwservice_manager find; diff --git a/radio/modem_svc_sit.te b/radio/modem_svc_sit.te index d23274c..a2fd70a 100644 --- a/radio/modem_svc_sit.te +++ b/radio/modem_svc_sit.te @@ -38,9 +38,6 @@ get_prop(modem_svc_sit, vendor_logger_prop) allow modem_svc_sit hal_exynos_rild_hwservice:hwservice_manager find; get_prop(modem_svc_sit, hwservicemanager_prop) -# Modem SVC will register the default instance of the AIDL ISharedModemPlatform hal. -hal_server_domain(modem_svc_sit, hal_shared_modem_platform) - # Write trace data to the Perfetto traced daemon. This requires connecting to # its producer socket and obtaining a (per-process) tmpfs fd. perfetto_producer(modem_svc_sit) diff --git a/radio/property_contexts b/radio/property_contexts index 549c745..218e970 100644 --- a/radio/property_contexts +++ b/radio/property_contexts @@ -60,6 +60,7 @@ vendor.gps. u:object_r:vendor_gps_prop:s0 persist.vendor.gps. u:object_r:vendor_gps_prop:s0 # Tcpdump_logger +persist.vendor.tcpdump.capture.len u:object_r:vendor_tcpdump_log_prop:s0 persist.vendor.tcpdump.log.alwayson u:object_r:vendor_tcpdump_log_prop:s0 vendor.tcpdump. u:object_r:vendor_tcpdump_log_prop:s0 diff --git a/radio/seapp_contexts b/radio/seapp_contexts index 7ed10c6..eec8a5e 100644 --- a/radio/seapp_contexts +++ b/radio/seapp_contexts @@ -34,4 +34,4 @@ user=system seinfo=platform name=com.google.android.CatEngine domain=cat_engine_ user=_app isPrivApp=true seinfo=platform name=com.samsung.slsi.telephony.satelliteservice domain=vendor_satellite_service levelFrom=all # Domain for pixel_modem_app -user=_app isPrivApp=true seinfo=platform name=com.google.android.modem.pms domain=pixel_modem_app levelFrom=all +user=_app isPrivApp=true seinfo=pms name=com.google.android.modem.pms domain=pixel_modem_app levelFrom=all diff --git a/tracking_denials/bluetooth.te b/tracking_denials/bluetooth.te new file mode 100644 index 0000000..3136980 --- /dev/null +++ b/tracking_denials/bluetooth.te @@ -0,0 +1,2 @@ +# b/382362300 +dontaudit bluetooth default_android_service:service_manager { find }; diff --git a/tracking_denials/bug_map b/tracking_denials/bug_map index b71e89c..418fa0d 100644 --- a/tracking_denials/bug_map +++ b/tracking_denials/bug_map @@ -1,32 +1,39 @@ +aconfigd apex_info_file file b/381327278 +bluetooth audio_config_prop file b/379245474 +bpfloader fs_bpf dir b/380989493 dump_display sysfs file b/322917055 dump_modem sscoredump_vendor_data_coredump_file dir b/361726331 dump_modem sscoredump_vendor_data_logcat_file dir b/361726331 -grilservice_app default_android_service service_manager b/366116096 +dumpstate system_data_file dir b/377787445 grilservice_app twoshay binder b/375564898 -hal_gnss_default vendor_gps_prop file b/318310869 +hal_camera_default aconfig_storage_metadata_file dir b/383013471 hal_power_default hal_power_default capability b/350830411 incidentd incidentd anon_inode b/322917075 +init init capability b/379206528 +insmod-sh vendor_edgetpu_debugfs dir b/385858548 kernel sepolicy_file file b/353418189 kernel system_bootstrap_lib_file dir b/353418189 kernel system_bootstrap_lib_file file b/353418189 kernel system_dlkm_file dir b/353418189 -modem_svc_sit hal_radioext_default process b/368187536 -modem_svc_sit hal_radioext_default process b/368188020 -modem_svc_sit modem_ml_svc_sit file b/360060680 -modem_svc_sit modem_ml_svc_sit file b/360060705 modem_svc_sit radio_vendor_data_file sock_file b/369539798 pixelstats_vendor block_device dir b/369539751 pixelstats_vendor block_device dir b/369540515 pixelstats_vendor sysfs file b/375564818 +platform_app vendor_fw_file dir b/377412254 +platform_app vendor_modem_prop property_service b/377412254 +platform_app vendor_rild_prop file b/377412254 +priv_app audio_config_prop file b/379245788 +radio audio_config_prop file b/379244519 ramdump ramdump capability b/369475712 -sctd sctd tcp_socket b/309550514 -sctd swcnd unix_stream_socket b/309550514 -sctd vendor_persist_config_default_prop file b/309550514 +ramdump_app default_prop file b/386149336 +ramdump_app privapp_data_file lnk_file b/385858779 +servicemanager modem_logging_control binder b/384376420 shell sysfs_net file b/338347525 -spad spad unix_stream_socket b/309550905 -swcnd swcnd unix_stream_socket b/309551062 system_suspend sysfs dir b/375563932 system_suspend sysfs_touch dir b/375563932 system_suspend sysfs_touch_gti dir b/350830429 systemui_app system_data_file dir b/375564360 +untrusted_app audio_config_prop file b/379245853 +zygote aconfig_storage_metadata_file dir b/383949166 +zygote zygote capability b/379206406 diff --git a/tracking_denials/file_contexts b/tracking_denials/file_contexts index 3a629b2..cf16b0a 100644 --- a/tracking_denials/file_contexts +++ b/tracking_denials/file_contexts @@ -9,12 +9,7 @@ /vendor/lib64/arm\.mali\.platform-V1-ndk\.so u:object_r:same_process_hal_file:s0 # Devices -/dev/logbuffer_maxq u:object_r:logbuffer_device:s0 -/dev/logbuffer_maxfg u:object_r:logbuffer_device:s0 -/dev/logbuffer_pca9468_tcpm u:object_r:logbuffer_device:s0 -/dev/logbuffer_maxfg_monitor u:object_r:logbuffer_device:s0 /dev/logbuffer_wc68 u:object_r:logbuffer_device:s0 -/dev/logbuffer_ln8411 u:object_r:logbuffer_device:s0 /dev/lwis-csi u:object_r:lwis_device:s0 /dev/lwis-eeprom-gt24p64e-imentet u:object_r:lwis_device:s0 /dev/lwis-eeprom-smaug-buraq u:object_r:lwis_device:s0 diff --git a/tracking_denials/grilservice_app.te b/tracking_denials/grilservice_app.te index c4dc75e..4ebeba8 100644 --- a/tracking_denials/grilservice_app.te +++ b/tracking_denials/grilservice_app.te @@ -1,2 +1,4 @@ # b/312069580 dontaudit grilservice_app hal_bluetooth_coexistence_service:service_manager { find }; +# b/366116096 +dontaudit grilservice_app default_android_service:service_manager { find }; diff --git a/vendor/debug_camera_app.te b/vendor/debug_camera_app.te index ddc4337..6c8a549 100644 --- a/vendor/debug_camera_app.te +++ b/vendor/debug_camera_app.te @@ -1,4 +1,8 @@ +# File containing sepolicies for GCA-Eng & GCA-Next. userdebug_or_eng(` # Allows GCA_Eng & GCA-Next to access the hw_jpeg /dev/video12. allow debug_camera_app hw_jpg_device:chr_file rw_file_perms; -') \ No newline at end of file + + # Allows tachyon_service to communicate with GCA-Eng via binder. + binder_call(edgetpu_tachyon_server, debug_camera_app); +') diff --git a/vendor/file.te b/vendor/file.te index 46f792e..9c90033 100644 --- a/vendor/file.te +++ b/vendor/file.te @@ -61,6 +61,7 @@ type chre_socket, file_type; # BT type vendor_bt_data_file, file_type, data_file_type; +type sysfs_bt_uart, sysfs_type, fs_type; # Vendor sched files userdebug_or_eng(` diff --git a/vendor/file_contexts b/vendor/file_contexts index c7fd912..f3a4316 100644 --- a/vendor/file_contexts +++ b/vendor/file_contexts @@ -67,6 +67,7 @@ /dev/logbuffer_maxfg_secondary u:object_r:logbuffer_device:s0 /dev/logbuffer_maxfg_base_monitor u:object_r:logbuffer_device:s0 /dev/logbuffer_maxfg_secondary_monitor u:object_r:logbuffer_device:s0 +/dev/logbuffer_dual_batt u:object_r:logbuffer_device:s0 /dev/logbuffer_tcpm u:object_r:logbuffer_device:s0 /dev/logbuffer_usbpd u:object_r:logbuffer_device:s0 /dev/logbuffer_pogo_transport u:object_r:logbuffer_device:s0 @@ -128,6 +129,8 @@ /dev/logbuffer_rtx u:object_r:logbuffer_device:s0 /dev/logbuffer_max77779fg u:object_r:logbuffer_device:s0 /dev/logbuffer_pca9468 u:object_r:logbuffer_device:s0 +/dev/logbuffer_ln8411 u:object_r:logbuffer_device:s0 +/dev/logbuffer_dc_mains u:object_r:logbuffer_device:s0 /dev/logbuffer_cpm u:object_r:logbuffer_device:s0 /dev/logbuffer_cpif u:object_r:logbuffer_device:s0 /dev/logbuffer_max77779fg_monitor u:object_r:logbuffer_device:s0 diff --git a/vendor/genfs_contexts b/vendor/genfs_contexts index 0f4531f..7bb4de4 100644 --- a/vendor/genfs_contexts +++ b/vendor/genfs_contexts @@ -31,6 +31,8 @@ genfscon sysfs /devices/platform/10ca0000.hsi2c/i2c-10/10-0057/registers_dump genfscon sysfs /devices/platform/10ca0000.hsi2c/i2c-10/10-0050/eeprom u:object_r:sysfs_batteryinfo:s0 genfscon sysfs /devices/platform/10ca0000.hsi2c/i2c-10/10-005b/power_supply u:object_r:sysfs_batteryinfo:s0 genfscon sysfs /devices/platform/10ca0000.hsi2c/i2c-10/10-005b/registers_dump u:object_r:sysfs_batteryinfo:s0 +genfscon sysfs /devices/platform/10cb0000.hsi2c/i2c-11/11-005e/power_supply u:object_r:sysfs_batteryinfo:s0 +genfscon sysfs /devices/platform/10cb0000.hsi2c/i2c-11/11-005e/registers_dump u:object_r:sysfs_power_dump:s0 genfscon sysfs /class/power_supply/wireless/device/version u:object_r:sysfs_batteryinfo:s0 genfscon sysfs /class/power_supply/wireless/device/status u:object_r:sysfs_batteryinfo:s0 genfscon sysfs /class/power_supply/wireless/device/fw_rev u:object_r:sysfs_batteryinfo:s0 @@ -372,13 +374,14 @@ genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/refresh_ctr genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/te_option u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/te_rate_hz u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/time_in_state u:object_r:sysfs_display:s0 -genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/frame_interval u:object_r:sysfs_display:s0 -genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/expected_present_time u:object_r:sysfs_display:s0 +genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/frame_interval_ns u:object_r:sysfs_display:s0 +genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/expected_present_time_ns u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/19470000.drmdecon/dqe0/atc u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/19470000.drmdecon/hibernation u:object_r:sysfs_display:s0 genfscon sysfs /module/drm/parameters/vblankoffdelay u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/exynos-drm/tui_status u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/backlight/panel0-backlight/als_table u:object_r:sysfs_write_leds:s0 +genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/color_data u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/error_count_te u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/19440000.drmdsim/19440000.drmdsim.0/error_count_unknown u:object_r:sysfs_display:s0 genfscon sysfs /devices/platform/110f0000.drmdp/drm-displayport/dp_hotplug_error_code u:object_r:sysfs_display:s0 @@ -493,3 +496,11 @@ genfscon sysfs /devices/platform/pwmleds/leds/green/max_brightness u:obje # CPU genfscon sysfs /kernel/metrics/cpuidle_histogram/cpuidle_histogram u:object_r:sysfs_cpu:s0 genfscon sysfs /kernel/metrics/cpuidle_histogram/cpucluster_histogram u:object_r:sysfs_cpu:s0 + +# Bluetooth +genfscon sysfs /devices/platform/155d0000.serial/uart_dbg u:object_r:sysfs_bt_uart:s0 + +# USB +starting_at_board_api(202504, ` +genfscon sysfs /devices/platform/11210000.usb/11210000.dwc3/udc/11210000.dwc3/state u:object_r:sysfs_udc:s0 +') diff --git a/vendor/google_camera_app.te b/vendor/google_camera_app.te index c572c26..5c4c6f0 100644 --- a/vendor/google_camera_app.te +++ b/vendor/google_camera_app.te @@ -8,3 +8,6 @@ allow google_camera_app edgetpu_device:chr_file { getattr read write ioctl map } # Allows GCA to access the hw_jpeg /dev/video12. allow google_camera_app hw_jpg_device:chr_file rw_file_perms; + +# Allows tachyon service to communicate with google_camera_app via binder. +binder_call(edgetpu_tachyon_server, google_camera_app); diff --git a/vendor/hal_bluetooth_btlinux.te b/vendor/hal_bluetooth_btlinux.te index 65e037d..272c372 100644 --- a/vendor/hal_bluetooth_btlinux.te +++ b/vendor/hal_bluetooth_btlinux.te @@ -1 +1,4 @@ +# Allow triggering uart skip suspend +allow hal_bluetooth_btlinux sysfs_bt_uart:file w_file_perms; + allow hal_bluetooth_btlinux vendor_bt_data_file:sock_file create_file_perms; diff --git a/vendor/hal_camera_default.te b/vendor/hal_camera_default.te index 4ff601b..379e1be 100644 --- a/vendor/hal_camera_default.te +++ b/vendor/hal_camera_default.te @@ -74,6 +74,7 @@ allow hal_camera_default sysfs_display:file r_file_perms; # Allow camera HAL to query preferred camera frequencies from the radio HAL # extensions to avoid interference with cellular antennas. allow hal_camera_default hal_radioext_hwservice:hwservice_manager find; +allow hal_camera_default hal_radio_ext_service:service_manager find; # Allows camera HAL to access the hw_jpeg /dev/video12. allow hal_camera_default hw_jpg_device:chr_file rw_file_perms; diff --git a/vendor/hal_graphics_composer_default.te b/vendor/hal_graphics_composer_default.te index 893a34e..de8b708 100644 --- a/vendor/hal_graphics_composer_default.te +++ b/vendor/hal_graphics_composer_default.te @@ -26,7 +26,7 @@ add_service(hal_graphics_composer_default, hal_pixel_display_service) # allow HWC/libdisplaycolor to read calibration data allow hal_graphics_composer_default mnt_vendor_file:dir search; allow hal_graphics_composer_default persist_file:dir search; -allow hal_graphics_composer_default persist_display_file:file r_file_perms; +allow hal_graphics_composer_default persist_display_file:file rw_file_perms; allow hal_graphics_composer_default persist_display_file:dir search; # allow HWC to get/set vendor_display_prop diff --git a/vendor/hal_usb_impl.te b/vendor/hal_usb_impl.te index e882d28..aaa9fae 100644 --- a/vendor/hal_usb_impl.te +++ b/vendor/hal_usb_impl.te @@ -30,4 +30,6 @@ allow hal_usb_impl usb_device:dir r_dir_perms; # For monitoring usb sysfs attributes allow hal_usb_impl sysfs_wakeup:dir search; allow hal_usb_impl sysfs_wakeup:file r_file_perms; - +starting_at_board_api(202504, ` +allow hal_usb_impl sysfs_udc:file r_file_perms; +') diff --git a/zumapro-sepolicy.mk b/zumapro-sepolicy.mk index 4edddb2..3112db3 100644 --- a/zumapro-sepolicy.mk +++ b/zumapro-sepolicy.mk @@ -1,6 +1,6 @@ # sepolicy that are shared among devices using zumapro BOARD_SEPOLICY_DIRS += device/google/zumapro-sepolicy/vendor -BOARD_SEPOLICY_DIRS += device/google/zumapro-sepolicy/radio +BOARD_VENDOR_SEPOLICY_DIRS += device/google/zumapro-sepolicy/radio PRODUCT_PRIVATE_SEPOLICY_DIRS += device/google/zumapro-sepolicy/radio/private # unresolved SELinux error log with bug tracking