Evolution-x-devices/device_google_gs201
2
0
Fork 0
mirror of https://github.com/Evolution-X-Devices/device_google_gs201 synced 2026-01-27 19:18:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

rfsd: fix avc errors

Browse Source 
[    8.024353] type=1400 audit(1636594727.560:42): avc: denied { chown } for comm="rfsd" capability=0 scontext=u:r:rfsd:s0 tcontext=u:r:rfsd:s0 tclass=capability permissive=1
[    8.027666] type=1400 audit(1636594727.564:43): avc: denied { setuid } for comm="rfsd" capability=7 scontext=u:r:rfsd:s0 tcontext=u:r:rfsd:s0 tclass=capability permissive=1

Bug: 205904361
Change-Id: I6e30a9622b930273fbc524e6bc84f2112f79f11c
This commit is contained in:
SalmaxChang
2022-02-15 17:08:52 +08:00
committed by Salmax Chang
parent a320d9b575
commit 1420e3d5d7
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
tracking_denials/rfsd.te
View File

@@ -1,3 +0,0 @@
# b/205904361
dontaudit rfsd rfsd:capability { chown };
dontaudit rfsd rfsd:capability { setuid };

3
whitechapel_pro/rfsd.te
View File

@@ -2,6 +2,9 @@ type rfsd, domain;
type rfsd_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(rfsd)
# Allow to setuid from root to radio and chown of modem efs files
allow rfsd self:capability { chown setuid };
# Allow to search block device and mnt dir for modem EFS partitions
allow rfsd mnt_vendor_file:dir search;
allow rfsd block_device:dir search;