tama-common: sepolicy: Fix isolated_app denial

[  246.285320] type=1400 audit(1662729263.666:7887): avc: denied { setattr } for comm="ThreadPoolForeg" name="crs.pb" dev="sda73" ino=39478 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0
[  246.285658] type=1400 audit(1662729263.670:7888): avc: denied { setattr } for comm="ThreadPoolForeg" name="ct_config.pb" dev="sda73" ino=26375 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0
[  246.286498] type=1400 audit(1662729263.670:7889): avc: denied { setattr } for comm="ThreadPoolForeg" name="kp_pinslist.pb" dev="sda73" ino=34892 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0
[  246.287160] type=1400 audit(1662729263.670:7890): avc: denied { setattr } for comm="ThreadPoolForeg" name="manifest.json" dev="sda73" ino=34899 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0
[  246.289090] type=1400 audit(1662729263.674:7891): avc: denied { setattr } for comm="ThreadPoolForeg" name="verified_contents.json" dev="sda73" ino=43171 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0

Signed-off-by: Sorayukii <sorayukii69@gmail.com>
This commit is contained in:
Elektroschmock 2022-04-17 04:08:26 +07:00 • committed by aoitsme
commit 4a48eda5d3

1
sepolicy/vendor/isolated_app.te vendored Normal file
View file

@ -0,0 +1 @@
allow isolated_app app_data_file:file { setattr };