summaryrefslogtreecommitdiff
path: root/vendor/qcom/common/hvdcp.te
AgeCommit message (Collapse)Author
2021-05-21Sync QCOM sepolicy rulesChihYao Chien
1. init_qti_chg_policy sysfs_wakeup:dir read denied { read } for comm="find" name="wakeup8" dev="sysfs" ino=55134 scontext=u:r:init_qti_chg_policy:s0 tcontext=u:object_r:sysfs_wakeup:s0 tclass=dir permissive=0 init_qti_chg_policy sysfs_iio_devices:dir search denied { search } for comm="cat" name="devices" dev="sysfs" ino=42746 scontext=u:r:init_qti_chg_policy:s0 tcontext=u:object_r:sysfs_iio_devices:s0 tclass=dir permissive=0 2. cnd default_android_hwservice:hwservice_manager find denied { find } for interface=vendor.qti.hardware.mwqemadapter::IMwqemAdapter sid=u:r:cnd:s0 pid=1224 scontext=u:r:cnd:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=0 3. rild default_android_hwservice:hwservice_manager find denied { find } for interface=vendor.qti.hardware.radio.internal.deviceinfo::IDeviceInfo sid=u:r:rild:s0 pid=1424 scontext=u:r:rild:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=0 4. sensors sensors_vendor_data_file:dir search denied { search } for name="sensors" dev="dm-6" ino=262 scontext=u:r:sensors:s0 tcontext=u:object_r:sensors_vendor_data_file:s0 tclass=dir permissive=0 5. qtelephony default_android_hwservice:hwservice_manager find denied { find } for interface=vendor.qti.hardware.radio.internal.deviceinfo::IDeviceInfo sid=u:r:qtelephony:s0:c32,c257,c512,c768 pid=4377 scontext=u:r:qtelephony:s0:c32,c257,c512,c768 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=0 6. hvdcp denied { write } for name="kmsg" dev="tmpfs" ino=26341 scontext=u:r:hvdcp:s0 tcontext=u:object_r:kmsg_device:s0 tclass=chr_file permissive=0 Bug: 188064567 Change-Id: Ib5e59796a56d6cb39fa1d482599d93903431ab2a
2020-02-10Grant hvdcp access to write persist filesWasb Liu
[ 71.239437] c6 572 type=1400 audit(2100288.025:4): avc: denied { write } for comm="hvdcp_opti" name="soh_info.txt" dev="sda2" ino=318 scontext=u:r:hvdcp:s0 tcontext=u:object_r:persist_hvdcp_file:s0 tclass=file permissive=0 Bug: 149199740 Test: check no related denied log Change-Id: I60d9ce3ad7b209807728d0d5efed50fa27f4dab3 Signed-off-by: Wasb Liu <wasbliu@google.com>
2019-12-10Grant hvdcp access to persist filesAdam Shih
[ 18.096451] type=1400 audit(724819.763:5): avc: denied { search } for comm="hvdcp_opti" name="hvdcp_opti" dev="sda2" ino=315 scontext=u:r:hvdcp:s0 tcontext=u:object_r:persist_hvdcp_file:s0 tclass=dir permissive=1 [ 18.098585] type=1400 audit(724819.763:5): avc: denied { search } for comm="hvdcp_opti" name="hvdcp_opti" dev="sda2" ino=315 scontext=u:r:hvdcp:s0 tcontext=u:object_r:persist_hvdcp_file:s0 tclass=dir permissive=1 [ 18.098641] type=1400 audit(724819.766:6): avc: denied { read } for comm="hvdcp_opti" name="soh_info.txt" dev="sda2" ino=318 scontext=u:r:hvdcp:s0 tcontext=u:object_r:persist_hvdcp_file:s0 tclass=file permissive=1 [ 18.098975] type=1400 audit(724819.766:6): avc: denied { read } for comm="hvdcp_opti" name="soh_info.txt" dev="sda2" ino=318 scontext=u:r:hvdcp:s0 tcontext=u:object_r:persist_hvdcp_file:s0 tclass=file permissive=1 [ 18.099390] type=1400 audit(724819.766:7): avc: denied { open } for comm="hvdcp_opti" path="/mnt/vendor/persist/hvdcp_opti/soh_info.txt" dev="sda2" ino=318 scontext=u:r:hvdcp:s0 tcontext=u:object_r:persist_hvdcp_file:s0 tclass=file permissive=1 Bug: 144740818 Test: boot to home with no hvdcp relevant log Change-Id: I3a5c88ece7eff7af1c9f256a977eaae2b66727e7
2019-12-05hvdcp: fix avc denialsWasb Liu
Bug: 144740818 Test: check log to make sure no hvdcp related avc denied Change-Id: I552b2d7882d0c24aa4ac8dfa8549078a5c0a704a Signed-off-by: Wasb Liu <wasbliu@google.com>
2019-11-12add label for hvdcp_optiWasb Liu
Bug: 144010899 Test: check hvdcp_opti running Change-Id: I6a13b6ca90ed203f3696e64874075e80fde1f044 Signed-off-by: Wasb Liu <wasbliu@google.com>