mirror of
https://github.com/Evolution-X-Devices/device_google_wahoo
synced 2026-02-01 07:50:47 +00:00
ab5b59745d
These changes address the following denials:
denied { read } for pid=560 comm="e2fsck" name="sda43" dev="tmpfs"
ino=22736 scontext=u:r:fsck:s0 tcontext=u:object_r:block_device:s0
tclass=blk_file
denied { open } for pid=560 comm="e2fsck" path="/dev/block/sda43"
dev="tmpfs" ino=22736 scontext=u:r:fsck:s0
tcontext=u:object_r:block_device:s0 tclass=blk_file
denied { write } for pid=560 comm="e2fsck" name="sda43" dev="tmpfs"
ino=22736 scontext=u:r:fsck:s0 tcontext=u:object_r:block_device:s0
tclass=blk_file
denied { read } for pid=666 comm="sensors.qcom" name="name" dev="sysfs"
ino=33510 scontext=u:r:sensors:s0 tcontext=u:object_r:sysfs:s0
tclass=file
denied { open } for pid=666 comm="sensors.qcom"
path="/sys/devices/soc/1d0101c.qcom,spss/subsys2/name" dev="sysfs"
ino=33510 scontext=u:r:sensors:s0 tcontext=u:object_r:sysfs:s0
tclass=file
denied { net_raw } for pid=666 comm="sensors.qcom" capability=13
scontext=u:r:sensors:s0 tcontext=u:r:sensors:s0 tclass=capability
denied { read write } for pid=678 comm="sensors.qcom" name="sns.reg"
dev="sdd3" ino=33 scontext=u:r:sensors:s0
tcontext=u:object_r:persist_sensors_file:s0 tclass=file
denied { search } for pid=794 comm="thermal-engine" name="msm_subsys"
dev="sysfs" ino=16320 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir
denied { read } for pid=794 comm="thermal-engine" name="devices"
dev="sysfs" ino=16322 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir
denied { open } for pid=794 comm="thermal-engine"
path="/sys/bus/msm_subsys/devices" dev="sysfs" ino=16322
scontext=u:r:thermal-engine:s0 tcontext=u:object_r:sysfs_msm_subsys:s0
tclass=dir
denied { read } for pid=794 comm="thermal-engine" name="subsys0"
dev="sysfs" ino=33422 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=lnk_file
denied { read } for pid=794 comm="thermal-engine" name="name"
dev="sysfs" ino=33416 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=file
denied { open } for pid=794 comm="thermal-engine"
path="/sys/devices/soc/soc:qcom,ipa_fws@1e08000/subsys0/name"
dev="sysfs" ino=33416 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=file
denied { open } for pid=794 comm="thermal-engine" path="/sys/devices"
dev="sysfs" ino=4 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs:s0 tclass=dir
denied { read } for pid=794 comm="thermal-engine" name="devices"
dev="sysfs" ino=4 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs:s0 tclass=dir
Bug: 34784662
Test: These denials are no longer present
Change-Id: I68665950fe7c2b25c11acb36b32a147049fa76e5
25 lines
650 B
Plaintext
25 lines
650 B
Plaintext
type thermal-engine, domain;
|
|
type thermal-engine_exec, exec_type, file_type;
|
|
|
|
init_daemon_domain(thermal-engine)
|
|
|
|
allow thermal-engine self:capability2 block_suspend;
|
|
|
|
# to read /sys/devices
|
|
allow thermal-engine sysfs:dir r_dir_perms;
|
|
|
|
allow thermal-engine sysfs_thermal:dir r_dir_perms;
|
|
allow thermal-engine sysfs_thermal:file rw_file_perms;
|
|
|
|
allow thermal-engine sysfs_rmtfs:file r_file_perms;
|
|
|
|
r_dir_file(thermal-engine, sysfs_uio)
|
|
r_dir_file(thermal-engine, sysfs_msm_subsys)
|
|
|
|
allow thermal-engine self:socket create_socket_perms;
|
|
allowxperm thermal-engine self:socket ioctl msm_sock_ipc_ioctls;
|
|
|
|
userdebug_or_eng(`
|
|
permissive thermal-engine;
|
|
')
|