Max Bires fcaa05bcab Adding system_server.te / file_contexts to handle some boot denials. ...

Allow rules added to address the following denials:

denied { ioctl } for pid=3488 comm="system-server-i"
path="socket:[56767]" dev="sockfs" ino=56767 ioctlcmd=c304
scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0
tclass=socket

denied { open read } for pid=3488 comm="system-server-i"
path="/persist/sensors/sensors_settings" dev="sdd3" ino=17
scontext=u:r:system_server:s0 tcontext=u:object_r:persist_file:s0
tclass=file

Bug: 34784662
Test: The above denials don't appear during bootup
Change-Id: Iadc31855906dedb0adaaaed6e483122c3e175567

2017-02-09 14:52:34 -08:00

..

adsprpcd.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

bluetooth.te

muskie: enable BT

2016-11-07 15:28:24 -08:00

bootanim.te

Added bootanim.te to add an extra allow rule for muskie

2017-02-07 20:41:31 -08:00

device.te

Adding sg_device and allow rules to tee.te

2017-02-07 12:59:04 -08:00

domain.te

Added surfaceflinger.te and domain.te to expand policy coverage.

2017-02-03 15:26:39 -08:00

file_contexts

Adding system_server.te / file_contexts to handle some boot denials.

2017-02-09 14:52:34 -08:00

file.te

Adding system_server.te / file_contexts to handle some boot denials.

2017-02-09 14:52:34 -08:00

init_power.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

init_radio.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

init.te

Adding allows to init.te and kernel.te to address boot logs.

2017-02-07 14:56:31 -08:00

ioctl_defines

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

ioctl_macros

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

irsc_util.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

kernel.te

Adding allows to init.te and kernel.te to address boot logs.

2017-02-07 14:56:31 -08:00

location.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

netmgrd.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

pd_services.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

per_mgr.te

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

per_proxy.te

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

perfd.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

port-bridge.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

property_contexts

muskie: enable BT

2016-11-07 15:28:24 -08:00

property.te

muskie: enable BT

2016-11-07 15:28:24 -08:00

qti.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

ramdump.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

rfs_access.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

rmt_storage.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

sensors.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

service_contexts

Adding files for management of service_contexts.

2017-02-03 14:21:44 -08:00

service.te

Adding files for management of service_contexts.

2017-02-03 14:21:44 -08:00

ssr_diag.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

ssr_setup.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

subsystem_ramdump.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

surfaceflinger.te

Added surfaceflinger.te and domain.te to expand policy coverage.

2017-02-03 15:26:39 -08:00

system_server.te

Adding system_server.te / file_contexts to handle some boot denials.

2017-02-09 14:52:34 -08:00

tee.te

Adding sg_device and allow rules to tee.te

2017-02-07 12:59:04 -08:00

thermal-engine.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

time_daemon.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

wcnss_filter.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

wcnss_service.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00