72c63096bd
ref logs:
09-06 10:07:18.006 536 536 I auditd : avc: denied { find } for pid=22543 uid=10225 name=android.hardware.power.stats.IPowerStats/default scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:object_r:hal_power_stats_service:s0 tclass=service_manager permissive=1
09-06 10:07:18.010 22543 22543 I auditd : type=1400 audit(0.0:65): avc: denied { call } for comm="pool-4-thread-1" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1 app=com.google.mds
Test: Tested with MDS app and the MDS can get IPowerStats binder and
call the interface.
Bug: 297250368
Change-Id: I7503a86baa01e4391d64f958cd053822de78d8fd
39 lines
1.4 KiB
Text
39 lines
1.4 KiB
Text
type modem_diagnostic_app, domain;
|
|
|
|
app_domain(modem_diagnostic_app)
|
|
net_domain(modem_diagnostic_app)
|
|
|
|
allow modem_diagnostic_app app_api_service:service_manager find;
|
|
allow modem_diagnostic_app radio_service:service_manager find;
|
|
|
|
userdebug_or_eng(`
|
|
hal_client_domain(modem_diagnostic_app, hal_power_stats);
|
|
|
|
binder_call(modem_diagnostic_app, dmd)
|
|
|
|
set_prop(modem_diagnostic_app, vendor_cbd_prop)
|
|
set_prop(modem_diagnostic_app, vendor_rild_prop)
|
|
set_prop(modem_diagnostic_app, vendor_modem_prop)
|
|
|
|
allow modem_diagnostic_app sysfs_chosen:dir r_dir_perms;
|
|
allow modem_diagnostic_app sysfs_chosen:file r_file_perms;
|
|
|
|
allow modem_diagnostic_app vendor_fw_file:file r_file_perms;
|
|
|
|
allow modem_diagnostic_app radio_vendor_data_file:dir create_dir_perms;
|
|
allow modem_diagnostic_app radio_vendor_data_file:file create_file_perms;
|
|
|
|
allow modem_diagnostic_app mnt_vendor_file:dir r_dir_perms;
|
|
allow modem_diagnostic_app mnt_vendor_file:file r_file_perms;
|
|
|
|
allow modem_diagnostic_app modem_img_file:dir r_dir_perms;
|
|
allow modem_diagnostic_app modem_img_file:file r_file_perms;
|
|
allow modem_diagnostic_app modem_img_file:lnk_file r_file_perms;
|
|
|
|
allow modem_diagnostic_app hal_vendor_oem_hwservice:hwservice_manager find;
|
|
|
|
allow modem_diagnostic_app sysfs_batteryinfo:file r_file_perms;
|
|
allow modem_diagnostic_app sysfs_batteryinfo:dir search;
|
|
|
|
dontaudit modem_diagnostic_app default_prop:file r_file_perms;
|
|
')
|