25748e9d93
This patch ports Zuma project SEPolicy and corrects the platform device name. init : Command 'exec /vendor/bin/hw/disable_contaminant_detection.sh' action=vendor.usb.contaminantdisable=true (/vendor/etc/init/hw/ init.zumapro.usb.rc:288) took 5ms and failed: Could not start exec service: File /vendor/bin/hw/disable_contaminant_detection.sh(labeled "u:object_r:vendor_file:s0") has incorrect label or no domain transition from u:r:init:s0 to another SELinux domain defined. Have you configured your service correctly? https://source.android.com/security/selinux/device-policy# label_new_services_and_address_denials. Note: this error shows up even in permissive mode in order to make auditing denials possible. Bug: 295127978 Test: manual test Change-Id: I4269127f0101250615aad9218a9e2684579a653b Signed-off-by: Kuen-Han Tsai <khtsai@google.com>
7 lines
418 B
Text
7 lines
418 B
Text
type disable-contaminant-detection-sh, domain;
|
|
type disable-contaminant-detection-sh_exec, vendor_file_type, exec_type, file_type;
|
|
init_daemon_domain(disable-contaminant-detection-sh)
|
|
|
|
allow disable-contaminant-detection-sh vendor_toolbox_exec:file execute_no_trans;
|
|
allow disable-contaminant-detection-sh sysfs_batteryinfo:dir r_dir_perms;
|
|
allow disable-contaminant-detection-sh sysfs_batteryinfo:file rw_file_perms;
|