NekoSakura/Android_Device_Mediatek_Sepolicy_Vndr
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sepolicy: basic: non_plat: Address mediaswcodec denials

Browse Source 
W oid.avc.decoder: type=1400 audit(0.0:642): avc: denied { connectto } for path="/dev/socket/logdr" scontext=u:r:mediaswcodec:s0 tcontext=u:r:logd:s0 tclass=unix_stream_socket permissive=0
I auditd  : type=1400 audit(0.0:1352): avc: denied { write } for comm="oid.avc.decoder" name="logdr" dev="tmpfs" ino=9467 scontext=u:r:mediaswcodec:s0 tcontext=u:object_r:logdr_socket:s0 tclass=sock_file permissive=0
crash log: https://pastebin.com/raw/Lhwhhbr0

Change-Id: Ia53ee584c82875e8bce032e0869ae58f60c52217
This commit is contained in:
SamarV-121 2022-09-15 11:07:05 +05:30 committed by Matsvei Niaverau
parent 173aae2fb1
commit 440f5f9ee7
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
basic/non_plat/mediaswcodec.te
View File

@ -14,3 +14,5 @@ allow mediaswcodec dri_device:chr_file rw_file_perms;
# Purpose: Allow to access ged for gralloc_extra functions # Purpose: Allow to access ged for gralloc_extra functions
allow mediaswcodec proc_ged:file rw_file_perms; allow mediaswcodec proc_ged:file rw_file_perms;
allowxperm mediaswcodec proc_ged:file ioctl { proc_ged_ioctls }; allowxperm mediaswcodec proc_ged:file ioctl { proc_ged_ioctls };
unix_socket_connect(mediaswcodec, logdr, logd)