mirror of
https://github.com/Evolution-X-Devices/device_google_wahoo
synced 2026-02-01 07:50:47 +00:00
b387500a64
If there is no security issue with having ims write to ims_socket, then
I am fine with granting the permission in order to hurry up the
enforcing status of this domain.
denied { read } for pid=888 comm="imsdatadaemon" name="timestamp_switch"
dev="sysfs" ino=27246 scontext=u:r:ims:s0 tcontext=u:object_r:sysfs:s0
tclass=file
denied { open } for pid=888 comm="imsdatadaemon"
path="/sys/module/diagchar/parameters/timestamp_switch" dev="sysfs"
ino=27246 scontext=u:r:ims:s0 tcontext=u:object_r:sysfs:s0 tclass=file
denied { read } for pid=1326 comm="imsrcsd" name="timestamp_switch"
dev="sysfs" ino=27246 scontext=u:r:hal_rcsservice:s0
tcontext=u:object_r:sysfs:s0 tclass=file
denied { write } for pid=1077 comm="ims_rtp_daemon" name="ims_datad"
dev="tmpfs" ino=27069 scontext=u:r:ims:s0
tcontext=u:object_r:ims_socket:s0 tclass=sock_file
Bug: 34784662
Test: These denials no longer appear
Change-Id: I95d8b62d73fae35fca5e292e6927c4663db76e6f
58 lines
2.0 KiB
Plaintext
58 lines
2.0 KiB
Plaintext
type sysfs_camera, sysfs_type, fs_type;
|
|
type sysfs_easel, sysfs_type, fs_type;
|
|
type sysfs_fingerprint, sysfs_type, fs_type;
|
|
type sysfs_graphics, sysfs_type, fs_type;
|
|
type sysfs_laser, sysfs_type, fs_type;
|
|
type sysfs_mdss_mdp_caps, sysfs_type, fs_type;
|
|
type sysfs_msm_subsys, sysfs_type, fs_type;
|
|
type sysfs_msm_subsys_restart, sysfs_type, fs_type;
|
|
type sysfs_net, sysfs_type, fs_type;
|
|
type sysfs_rmtfs, sysfs_type, fs_type;
|
|
type sysfs_soc, sysfs_type, fs_type;
|
|
type sysfs_timestamp_switch, sysfs_type, fs_type;
|
|
type sysfs_usb_c, sysfs_type, fs_type;
|
|
|
|
type debugfs_clk, debugfs_type, fs_type;
|
|
type debugfs_ion, debugfs_type, fs_type;
|
|
type debugfs_ipc, debugfs_type, fs_type;
|
|
type debugfs_kgsl, debugfs_type, fs_type;
|
|
type debugfs_rpm, debugfs_type, fs_type;
|
|
type debugfs_rmt_storage, debugfs_type, fs_type;
|
|
type debugfs_usb, debugfs_type, fs_type;
|
|
type debugfs_wlan, debugfs_type, fs_type;
|
|
|
|
# /proc
|
|
type proc_wifi_dbg, fs_type;
|
|
|
|
type qmuxd_socket, file_type;
|
|
type netmgrd_socket, file_type;
|
|
type thermal_socket, file_type;
|
|
type perfd_socket, file_type;
|
|
|
|
type ims_socket, file_type;
|
|
type cnd_socket, file_type;
|
|
type chre_socket, file_type;
|
|
|
|
type firmware_file, fs_type, contextmount_type;
|
|
|
|
type location_data_file, file_type, data_file_type;
|
|
|
|
type persist_file, file_type;
|
|
type persist_data_file, file_type;
|
|
type persist_display_file, file_type;
|
|
type persist_sensors_file, file_type;
|
|
|
|
type netmgr_data_file, file_type, data_file_type;
|
|
|
|
type camera_vendor_data_file, file_type, data_file_type;
|
|
type nfc_vendor_data_file, file_type, data_file_type;
|
|
type radio_vendor_data_file, file_type, data_file_type, mlstrustedobject;
|
|
type cnss_vendor_data_file, file_type, data_file_type, mlstrustedobject;
|
|
type ramdump_vendor_data_file, file_type, data_file_type, mlstrustedobject;
|
|
type modem_dump_file, file_type, data_file_type;
|
|
type ese_vendor_data_file, file_type, data_file_type;
|
|
|
|
type vendor_firmware_file, vendor_file_type, file_type;
|
|
|
|
type ramdump_data_file, file_type, data_file_type, mlstrustedobject;
|