From cd447908ec05733288c6413b0b140b4207879659 Mon Sep 17 00:00:00 2001 From: Aaron Tsai Date: Thu, 21 Sep 2023 03:13:42 +0000 Subject: [PATCH] Add permission for setting gril property 08-23 16:41:13.524 1 1 I auditd : type=1107 audit(0.0:404): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=vendor.gril.recovery.count pid=1024 uid=1001 gid=1001 scontext=u:r:hal_radioext_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=1' Bug: 203824024 Test: manual test Change-Id: I0bc67815fde6651e54ea422e5fd3622846bb3c56 --- radio/hal_radioext_default.te | 1 + radio/property.te | 1 + radio/property_contexts | 3 +++ 3 files changed, 5 insertions(+) diff --git a/radio/hal_radioext_default.te b/radio/hal_radioext_default.te index 6e17e19..fddd5aa 100644 --- a/radio/hal_radioext_default.te +++ b/radio/hal_radioext_default.te @@ -4,6 +4,7 @@ init_daemon_domain(hal_radioext_default) hwbinder_use(hal_radioext_default) get_prop(hal_radioext_default, hwservicemanager_prop) +set_prop(hal_radioext_default, vendor_gril_prop) add_hwservice(hal_radioext_default, hal_radioext_hwservice) binder_call(hal_radioext_default, servicemanager) diff --git a/radio/property.te b/radio/property.te index 16ccefc..4a2cc46 100644 --- a/radio/property.te +++ b/radio/property.te @@ -6,6 +6,7 @@ vendor_internal_prop(vendor_persist_config_default_prop) vendor_internal_prop(vendor_diag_prop) vendor_internal_prop(vendor_modem_prop) vendor_internal_prop(vendor_rild_prop) +vendor_internal_prop(vendor_gril_prop) vendor_internal_prop(vendor_ssrdump_prop) vendor_internal_prop(vendor_wifi_version) vendor_internal_prop(vendor_imssvc_prop) diff --git a/radio/property_contexts b/radio/property_contexts index 0cad5bc..3f2c917 100644 --- a/radio/property_contexts +++ b/radio/property_contexts @@ -38,6 +38,9 @@ vendor.sys.rild_reset u:object_r:vendor_rild_prop:s0 persist.vendor.radio. u:object_r:vendor_rild_prop:s0 ro.vendor.config.build_carrier u:object_r:vendor_carrier_prop:s0 +# for GRIL +vendor.gril. u:object_r:vendor_gril_prop:s0 + # SSR Detector vendor.debug.ssrdump. u:object_r:vendor_ssrdump_prop:s0 persist.vendor.sys.ssr. u:object_r:vendor_ssrdump_prop:s0