diff options
| author | Hungyen Weng <hungyenweng@google.com> | 2020-08-14 11:47:20 +0800 |
|---|---|---|
| committer | android-build-team Robot <android-build-team-robot@google.com> | 2020-08-14 14:26:05 +0000 |
| commit | e5074098292606289d07e053b880be785826100e (patch) | |
| tree | 86f1bc23c16809084332451477abebcb8f149f81 | |
| parent | 6ae84a07f70ac3b3cf92fd82bae18779d7445b11 (diff) | |
| download | redbull-sepolicy-e5074098292606289d07e053b880be785826100e.tar.gz | |
Fix modem_svc sepolicy on user build
08-14 11:49:22.098 logd 14788 14788 W modem_svc: type=1400 audit(0.0:500): avc: denied { use } for path="/data/user_de/0/com.android.shell/files/bugreports/dumpstate_board.txt" dev="dm-9" ino=5922 scontext=u:r:modem_svc:s0 tcontext=u:r:dumpstate:s0 tclass=fd permissive=0
08-14 11:49:22.098 logd 14788 14788 W modem_svc: type=1400 audit(0.0:501): avc: denied { use } for path="/vendor/bin/modem_svc" dev="dm-7" ino=244 scontext=u:r:modem_svc:s0 tcontext=u:r:hal_dumpstate_impl:s0 tclass=fd permissive=0
Bug: 164261124
Change-Id: I44a6952ec78b51ad594dd32cbe4a5b4287f4606c
(cherry picked from commit 8b25f5f20992672abdb8f635d6e8c128fe8a4d8a)
| -rw-r--r-- | vendor/google/modem_svc.te | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/vendor/google/modem_svc.te b/vendor/google/modem_svc.te index f09bfac..a30368d 100644 --- a/vendor/google/modem_svc.te +++ b/vendor/google/modem_svc.te @@ -12,11 +12,9 @@ get_prop(modem_svc, exported3_radio_prop) get_prop(modem_svc, vendor_build_type_prop) # For bugreport collection -userdebug_or_eng(` - allow modem_svc hal_dumpstate_impl:fd use; - allow modem_svc dumpstate:fd use; - allow modem_svc shell_data_file:file write; -') +allow modem_svc hal_dumpstate_impl:fd use; +allow modem_svc dumpstate:fd use; +allow modem_svc shell_data_file:file write; dontaudit modem_svc sysfs_msm_subsys:dir r_dir_perms; dontaudit modem_svc sysfs_ssr:file r_file_perms; |