[SELinux denied] Fix avc: denied on u:object_r:qchook_service:s0

- For wahoo

SELinux : avc:  denied  { find } for pid=5391 uid=10223 name=qchook scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:qchook_service:s0 tclass=service_manager permissive=0

Bug: 123613652
Test: 1. make
      2. fastboot ROM and use Sprint SIM to verify message "avc denied"

Change-Id: I25d53591f25777c47870b75e39457720e3149f09
This commit is contained in:
tom hsu
2019-11-08 16:19:32 +08:00
parent 6e1f02c999
commit d4b264086f
2 changed files with 13 additions and 0 deletions

View File

@@ -4,3 +4,7 @@ user=system seinfo=platform name=.dataservices domain=dataservice_app type=syste
# Domain for WfcActivation app
user=_app seinfo=wfcactivation name=com.google.android.wfcactivation domain=wfc_activation_app levelFrom=all
# Domain for Sprint Hidden Menu
user=_app isPrivApp=true seinfo=platform name=com.google.android.hiddenmenu domain=sprint_hidden_menu type=app_data_file levelFrom=all

View File

@@ -0,0 +1,9 @@
type sprint_hidden_menu, domain, coredomain;
app_domain(sprint_hidden_menu)
net_domain(sprint_hidden_menu)
# Services
allow sprint_hidden_menu app_api_service:service_manager find;
allow sprint_hidden_menu qchook_service:service_manager find;
allow sprint_hidden_menu radio_service:service_manager find;