diff options
| author | Nick Chung <nickchung@google.com> | 2020-07-24 15:10:53 +0800 |
|---|---|---|
| committer | Nick Chung <nickchung@google.com> | 2020-07-24 15:10:53 +0800 |
| commit | fb0342595fec90e490984460ddfa8bc5285ce4c4 (patch) | |
| tree | d8e996f2d2229d70232016c7f58f5d2e6dea64a5 | |
| parent | 26662cbb75268304bb42a71098f0a228f35450a6 (diff) | |
| download | redbull-sepolicy-fb0342595fec90e490984460ddfa8bc5285ce4c4.tar.gz | |
fix avc denied for google_camera_app
denied log:
avc: denied { search } for comm="pck-temporal-bi" name="soc0"
dev="sysfs" ino=47912 scontext=u:r:google_camera_app:s0:c230,c256,c512,c768
tcontext=u:object_r:sysfs_soc:s0 tclass=dir permissive=0 app=com.google.android.GoogleCamera
avc: denied { read } for comm="pck-temporal-bi" name="soc_id"
dev="sysfs" ino=47916 scontext=u:r:google_camera_app:s0:c230,c256,c512,c768
tcontext=u:object_r:sysfs_soc:s0 tclass=file permissive=0 app=com.google.android.GoogleCamera
Bug: 162046880
Test: avc denied is gone. CTS/GCA
Change-Id: I9c71e7696ac047e775f7ca04f1ddc4270a3924cf
| -rw-r--r-- | vendor/google/google_camera_app.te | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/vendor/google/google_camera_app.te b/vendor/google/google_camera_app.te index 4d88d17..4a3be68 100644 --- a/vendor/google/google_camera_app.te +++ b/vendor/google/google_camera_app.te @@ -78,3 +78,7 @@ get_prop(google_camera_app, vendor_camera_ro_prop) # Allow read vendor display prop get_prop(google_camera_app, vendor_display_prop) + +# Allow read sysfs soc +allow google_camera_app sysfs_soc:dir search; +allow google_camera_app sysfs_soc:file r_file_perms; |