From bad14a58a954de2950dfd84e2d6b5478cf09f4c9 Mon Sep 17 00:00:00 2001 From: Robin Peng Date: Tue, 17 Dec 2019 18:19:25 +0800 Subject: [PATCH] Allow vendor_init to set property of logpersistd_logging_prop init: Do not have permissions to set 'logd.logpersistd' to 'logcatd' in property file '/vendor/build.prop': SELinux permission check failed init: Do not have permissions to set 'logd.logpersistd.size' to '30' in property file '/vendor/build.prop': SELinux permission check failed Bug: 114766334 Test: flash selinux modules to device and reboot under enforcing mode, check if the avc denied log exists Change-Id: If6bfa1c747f9a2af7fd9499944b590718aab4b9a --- sepolicy/vendor/vendor_init.te | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/sepolicy/vendor/vendor_init.te b/sepolicy/vendor/vendor_init.te index 0953dcb0..fd786118 100644 --- a/sepolicy/vendor/vendor_init.te +++ b/sepolicy/vendor/vendor_init.te @@ -36,3 +36,8 @@ allow vendor_init debugfs_tracing_instances:file w_file_perms; # Write to touch vrmode node allow vendor_init sysfs_touch:file w_file_perms; + +# Allow vendor_init to set property of logpersistd_logging_prop +userdebug_or_eng(` + set_prop(vendor_init, logpersistd_logging_prop) +')