cloudy/device_samsung_a32
Watch
1
Fork
You've already forked device_samsung_a32
 0
Code Issues 1 Pull requests Projects Releases Wiki Activity

a32: sepolicy: Address Audio HAL denials

Browse source 
avc: denied { write } for comm="binder:746_2" name="property_service" dev="tmpfs" ino=2165 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=1

avc:  denied  { find } for pid=741 uid=1041 name=android.system.suspend.ISystemSuspend/default scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:hal_system_suspend_service:s0 tclass=service_manager permissive=1

avc: denied { call } for scontext=u:r:hal_audio_default:s0 tcontext=u:r:system_suspend:s0 tclass=binder permissive=1

avc: denied { call } for comm="binder:746_2" scontext=u:r:hal_audio_default:s0 tcontext=u:r:mtk_hal_power:s0 tclass=binder permissive=1

avc: denied { read write } for comm="binder:746_2" name="ccci_aud" dev="tmpfs" ino=13005 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:ccci_aud_device:s0 tclass=chr_file permissive=1

avc: denied { map } for path="/dev/ccci_raw_audio" dev="tmpfs" ino=13007 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:ccci_aud_device:s0 tclass=chr_file permissive=1

avc: denied { open } for path="/sys/firmware/devicetree/base/chosen/atag,boot" dev="sysfs" ino=115 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:sysfs_boot_info:s0 tclass=file permissive=1

avc: denied { open } for comm="binder:746_2" path="/data/vendor/audiohal/audio_param" dev="dm-31" ino=308 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:mtk_audiohal_data_file:s0 tclass=dir permissive=1

avc: denied { connectto } for path="/dev/socket/property_service" scontext=u:r:hal_audio_default:s0 tcontext=u:r:init:s0 tclass=unix_stream_socket permissive=1
This commit is contained in:
AndroidHQ254 2024-04-29 00:10:28 +03:00
commit d35ae9762d
No known key found for this signature in database
GPG key ID: 48008337615EE8A9
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
sepolicy/vendor/hal_audio_default.te vendored
View file

@ -1,5 +1,15 @@
allow hal_audio_default persist_data_file:dir search;
allow hal_audio_default rild:unix_stream_socket connectto;
allow hal_audio_default property_socket:sock_file write;
allow hal_audio_default init:unix_stream_socket connectto;
allow hal_audio_default mtk_audiohal_data_file:dir create_dir_perms;
allow hal_audio_default mtk_audiohal_data_file:file create_file_perms;
allow hal_audio_default sysfs_boot_info:file r_file_perms;
allow hal_audio_default ccci_aud_device:chr_file rw_file_perms;
allow hal_audio_default hal_system_suspend_service:service_manager find;
binder_call(hal_audio_default, mtk_hal_power)
get_prop(hal_audio_default, vendor_exported_system_prop)
get_prop(hal_audio_default, vendor_radio_prop)