eed49f4c46
Bug: 301641283
selinux log:
11-03 15:32:38.850 2643 2643 I auditd : type=1400 audit(0.0:1616): avc: denied { call } for comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.850 2643 2643 I binder:2643_3: type=1400 audit(0.0:1616): avc: denied { call } for scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854 2643 2643 I auditd : type=1400 audit(0.0:1617): avc: denied { transfer } for comm="binder:2643_3" scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854 2643 2643 I binder:2643_3: type=1400 audit(0.0:1617): avc: denied { transfer } for scontext=u:r:modem_diagnostic_app:s0:c512,c768 tcontext=u:r:rild:s0 tclass=binder permissive=1 app=com.google.mds
11-03 15:32:38.854 1095 1095 I auditd : type=1400 audit(0.0:1618): avc: denied { call } for comm="HwBinder:1095_1" scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1
11-03 15:32:38.854 1095 1095 I HwBinder:1095_1: type=1400 audit(0.0:1618): avc: denied { call } for scontext=u:r:rild:s0 tcontext=u:r:modem_diagnostic_app:s0:c512,c768 tclass=binder permissive=1
Change-Id: Ia71844db230302fd3120b28b3ade2e55443ec078
42 lines
1.5 KiB
Text
42 lines
1.5 KiB
Text
type modem_diagnostic_app, domain;
|
|
|
|
app_domain(modem_diagnostic_app)
|
|
net_domain(modem_diagnostic_app)
|
|
|
|
allow modem_diagnostic_app app_api_service:service_manager find;
|
|
allow modem_diagnostic_app radio_service:service_manager find;
|
|
|
|
userdebug_or_eng(`
|
|
hal_client_domain(modem_diagnostic_app, hal_power_stats);
|
|
|
|
allow modem_diagnostic_app hal_exynos_rild_hwservice:hwservice_manager find;
|
|
binder_call(modem_diagnostic_app, rild)
|
|
|
|
binder_call(modem_diagnostic_app, dmd)
|
|
|
|
set_prop(modem_diagnostic_app, vendor_cbd_prop)
|
|
set_prop(modem_diagnostic_app, vendor_rild_prop)
|
|
set_prop(modem_diagnostic_app, vendor_modem_prop)
|
|
|
|
allow modem_diagnostic_app sysfs_chosen:dir r_dir_perms;
|
|
allow modem_diagnostic_app sysfs_chosen:file r_file_perms;
|
|
|
|
allow modem_diagnostic_app vendor_fw_file:file r_file_perms;
|
|
|
|
allow modem_diagnostic_app radio_vendor_data_file:dir create_dir_perms;
|
|
allow modem_diagnostic_app radio_vendor_data_file:file create_file_perms;
|
|
|
|
allow modem_diagnostic_app mnt_vendor_file:dir r_dir_perms;
|
|
allow modem_diagnostic_app mnt_vendor_file:file r_file_perms;
|
|
|
|
allow modem_diagnostic_app modem_img_file:dir r_dir_perms;
|
|
allow modem_diagnostic_app modem_img_file:file r_file_perms;
|
|
allow modem_diagnostic_app modem_img_file:lnk_file r_file_perms;
|
|
|
|
allow modem_diagnostic_app hal_vendor_oem_hwservice:hwservice_manager find;
|
|
|
|
allow modem_diagnostic_app sysfs_batteryinfo:file r_file_perms;
|
|
allow modem_diagnostic_app sysfs_batteryinfo:dir search;
|
|
|
|
dontaudit modem_diagnostic_app default_prop:file r_file_perms;
|
|
')
|