Allow dataservice to access system files

This change fixes the following denials

auditd  : type=1400 audit(0.0:320): avc: denied { search } for
comm=".dataservices" name="com.quicinc.cne.CNEService" dev="sda10"
ino=3465228 scontext=u:r:dataservice_app:s0
tcontext=u:object_r:system_app_data_file:s0 tclass=dir permissive=0

Bug: 62121277
Change-Id: I00453e9e070e439c6f87472764b8b6806501105b
This commit is contained in:
Jayachandran C
2017-05-30 11:48:39 -07:00
committed by Jayachandran Chinnakkannu
parent 19057ffcac
commit 8d9d9c3cce

View File

@@ -10,6 +10,10 @@ allow dataservice_app { app_api_service system_api_service audioserver_service r
r_dir_file(dataservice_app, sysfs_msm_subsys)
allow dataservice_app vnd_uce_hwservice:hwservice_manager find;
#TODO remove the following 2 if dataservice is moved out of system as part of b/38043081
allow dataservice_app system_app_data_file:dir create_dir_perms;
allow dataservice_app system_app_data_file:{ file lnk_file } create_file_perms;
# TODO: Remove this when b/38043081 is resolved
unix_socket_connect(dataservice_app, cnd, cnd)