Max Bires 0c479addf2 Added audioserver.te and some allow rules and perfd_socket type ...

Added allow rules for the following denials:
denied { call } for pid=2460 comm="AudioOut_D"
scontext=u:r:audioserver:s0 tcontext=u:r:bootanim:s0 tclass=binder

denied { write } for pid=1464 comm="writer" name="perfd" dev="tmpfs"
ino=11825 scontext=u:r:audioserver:s0
tcontext=u:object_r:socket_device:s0 tclass=sock_file

Bug: 34784662
Test: The above denials are no longer seen in the selinux logs
Change-Id: I4dc7c054d14e8a06d42167194cf211e0822bb3a9

2017-02-15 09:02:32 -08:00

..

adsprpcd.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

audioserver.te

Added audioserver.te and some allow rules and perfd_socket type

2017-02-15 09:02:32 -08:00

bluetooth.te

muskie: enable BT

2016-11-07 15:28:24 -08:00

bootanim.te

Added bootanim.te to add an extra allow rule for muskie

2017-02-07 20:41:31 -08:00

cameraserver.te

Adding cameraserver.te and appropriate camera_prop

2017-02-10 14:09:20 -08:00

device.te

Added sdd_block_device so tee could access what was a generic blk_file

2017-02-10 13:33:11 -08:00

domain.te

Added surfaceflinger.te and domain.te to expand policy coverage.

2017-02-03 15:26:39 -08:00

file_contexts

Added audioserver.te and some allow rules and perfd_socket type

2017-02-15 09:02:32 -08:00

file.te

Added audioserver.te and some allow rules and perfd_socket type

2017-02-15 09:02:32 -08:00

init_power.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

init_radio.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

init.te

Adding allows to init.te and kernel.te to address boot logs.

2017-02-07 14:56:31 -08:00

ioctl_defines

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

ioctl_macros

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

irsc_util.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

kernel.te

Adding allows to init.te and kernel.te to address boot logs.

2017-02-07 14:56:31 -08:00

location.te

Added location allow rules and corresponding file contexts

2017-02-10 09:58:01 -08:00

netmgrd.te

Added some allows to netmgrd.te

2017-02-10 14:40:13 -08:00

pd_services.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

per_mgr.te

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

per_proxy.te

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

perfd.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

port-bridge.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

property_contexts

Adding cameraserver.te and appropriate camera_prop

2017-02-10 14:09:20 -08:00

property.te

Adding cameraserver.te and appropriate camera_prop

2017-02-10 14:09:20 -08:00

qti.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

ramdump.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

rfs_access.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

rild.te

Adding rild.te and associated allows for bootup denials

2017-02-14 13:36:12 -08:00

rmt_storage.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

sensors.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

service_contexts

Adding files for management of service_contexts.

2017-02-03 14:21:44 -08:00

service.te

Adding files for management of service_contexts.

2017-02-03 14:21:44 -08:00

ssr_diag.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

ssr_setup.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

subsystem_ramdump.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

surfaceflinger.te

Added dontaudit to surfaceflinger for firmware file dir search

2017-02-10 10:44:36 -08:00

system_server.te

Adding system_server.te / file_contexts to handle some boot denials.

2017-02-09 14:52:34 -08:00

tee.te

Added sdd_block_device so tee could access what was a generic blk_file

2017-02-10 13:33:11 -08:00

thermal-engine.te

Added thermal engine allow rule and defined sysfs_thermal files

2017-02-09 23:07:08 +00:00

time_daemon.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

wcnss_filter.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

wcnss_service.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00