Max Bires ab5b59745d Adding contexts and rules to address denials.
These changes address the following denials:
denied  { read } for  pid=560 comm="e2fsck" name="sda43" dev="tmpfs"
ino=22736 scontext=u:r:fsck:s0 tcontext=u:object_r:block_device:s0
tclass=blk_file

denied  { open } for  pid=560 comm="e2fsck" path="/dev/block/sda43"
dev="tmpfs" ino=22736 scontext=u:r:fsck:s0
tcontext=u:object_r:block_device:s0 tclass=blk_file

denied  { write } for  pid=560 comm="e2fsck" name="sda43" dev="tmpfs"
ino=22736 scontext=u:r:fsck:s0 tcontext=u:object_r:block_device:s0
tclass=blk_file

denied { read } for pid=666 comm="sensors.qcom" name="name" dev="sysfs"
ino=33510 scontext=u:r:sensors:s0 tcontext=u:object_r:sysfs:s0
tclass=file

denied { open } for pid=666 comm="sensors.qcom"
path="/sys/devices/soc/1d0101c.qcom,spss/subsys2/name" dev="sysfs"
ino=33510 scontext=u:r:sensors:s0 tcontext=u:object_r:sysfs:s0
tclass=file

denied { net_raw } for pid=666 comm="sensors.qcom" capability=13
scontext=u:r:sensors:s0 tcontext=u:r:sensors:s0 tclass=capability

denied { read write } for pid=678 comm="sensors.qcom" name="sns.reg"
dev="sdd3" ino=33 scontext=u:r:sensors:s0
tcontext=u:object_r:persist_sensors_file:s0 tclass=file

denied { search } for pid=794 comm="thermal-engine" name="msm_subsys"
dev="sysfs" ino=16320 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir

denied { read } for pid=794 comm="thermal-engine" name="devices"
dev="sysfs" ino=16322 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir

denied { open } for pid=794 comm="thermal-engine"
path="/sys/bus/msm_subsys/devices" dev="sysfs" ino=16322
scontext=u:r:thermal-engine:s0 tcontext=u:object_r:sysfs_msm_subsys:s0
tclass=dir

denied { read } for pid=794 comm="thermal-engine" name="subsys0"
dev="sysfs" ino=33422 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=lnk_file

denied { read } for pid=794 comm="thermal-engine" name="name"
dev="sysfs" ino=33416 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=file

denied { open } for pid=794 comm="thermal-engine"
path="/sys/devices/soc/soc:qcom,ipa_fws@1e08000/subsys0/name"
dev="sysfs" ino=33416 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=file

denied { open } for pid=794 comm="thermal-engine" path="/sys/devices"
dev="sysfs" ino=4 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs:s0 tclass=dir

denied { read } for pid=794 comm="thermal-engine" name="devices"
dev="sysfs" ino=4 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs:s0 tclass=dir

Bug: 34784662
Test: These denials are no longer present
Change-Id: I68665950fe7c2b25c11acb36b32a147049fa76e5
2017-03-16 21:47:32 +00:00
Description
No description provided
4.4 MiB
Languages
C++ 54.8%
Makefile 33.2%
C 5.5%
Shell 4.6%
Python 1.3%
Other 0.6%