mirror of
https://github.com/Evolution-X-Devices/device_google_wahoo
synced 2026-02-01 07:50:47 +00:00
Allow dataservice to access system files
This change fixes the following denials
auditd : type=1400 audit(0.0:320): avc: denied { search } for
comm=".dataservices" name="com.quicinc.cne.CNEService" dev="sda10"
ino=3465228 scontext=u:r:dataservice_app:s0
tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0
Bug: 62121277
Change-Id: I00453e9e070e439c6f87472764b8b6806501105b
This commit is contained in:
committed by
Jayachandran Chinnakkannu
parent
19057ffcac
commit
8d9d9c3cce
@@ -10,6 +10,10 @@ allow dataservice_app { app_api_service system_api_service audioserver_service r
|
||||
r_dir_file(dataservice_app, sysfs_msm_subsys)
|
||||
allow dataservice_app vnd_uce_hwservice:hwservice_manager find;
|
||||
|
||||
#TODO remove the following 2 if dataservice is moved out of system as part of b/38043081
|
||||
allow dataservice_app system_app_data_file:dir create_dir_perms;
|
||||
allow dataservice_app system_app_data_file:{ file lnk_file } create_file_perms;
|
||||
|
||||
# TODO: Remove this when b/38043081 is resolved
|
||||
unix_socket_connect(dataservice_app, cnd, cnd)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user