diff options
| author | SalmaxChang <salmaxchang@google.com> | 2022-06-06 20:36:44 +0800 |
|---|---|---|
| committer | Salmax Chang <salmaxchang@google.com> | 2022-06-22 04:21:37 +0000 |
| commit | a9157994c3e376ff6fc12be5f31502c0cd447744 (patch) | |
| tree | 070b5db28aead482b70f8aa37f55de3ae6f07fed | |
| parent | 263a6b0f8a43b0ff470bdc6893cbaf48d0027abb (diff) | |
| download | gs101-sepolicy-a9157994c3e376ff6fc12be5f31502c0cd447744.tar.gz | |
modem_svc: Fix avc error
avc: denied { write } for comm="modem_svc_sit" name="modem_stat" dev="dm-42" ino=331 scontext=u:r:modem_svc_sit:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir permissive=0
Bug: 234844823
Change-Id: I51db41d73be317cc7fc84981ac5f04e254a360d0
Merged-In: I51db41d73be317cc7fc84981ac5f04e254a360d0
| -rw-r--r-- | whitechapel/vendor/google/file_contexts | 2 | ||||
| -rw-r--r-- | whitechapel/vendor/google/modem_svc_sit.te | 1 |
2 files changed, 2 insertions, 1 deletions
diff --git a/whitechapel/vendor/google/file_contexts b/whitechapel/vendor/google/file_contexts index 2a802f4..4cb534a 100644 --- a/whitechapel/vendor/google/file_contexts +++ b/whitechapel/vendor/google/file_contexts @@ -268,7 +268,7 @@ # modem_svc_sit files /vendor/bin/modem_svc_sit u:object_r:modem_svc_sit_exec:s0 -/data/vendor/modem_stat/debug\.txt u:object_r:modem_stat_data_file:s0 +/data/vendor/modem_stat(/.*)? u:object_r:modem_stat_data_file:s0 # modem mnt files /mnt/vendor/efs(/.*)? u:object_r:modem_efs_file:s0 diff --git a/whitechapel/vendor/google/modem_svc_sit.te b/whitechapel/vendor/google/modem_svc_sit.te index eeba997..f664359 100644 --- a/whitechapel/vendor/google/modem_svc_sit.te +++ b/whitechapel/vendor/google/modem_svc_sit.te @@ -14,6 +14,7 @@ allow modem_svc_sit radio_device:chr_file rw_file_perms; # Grant vendor radio and modem file/dir creation permission allow modem_svc_sit radio_vendor_data_file:dir create_dir_perms; allow modem_svc_sit radio_vendor_data_file:file create_file_perms; +allow modem_svc_sit modem_stat_data_file:dir create_dir_perms; allow modem_svc_sit modem_stat_data_file:file create_file_perms; allow modem_svc_sit mnt_vendor_file:dir search; |