W oid.avc.decoder: type=1400 audit(0.0:642): avc: denied { connectto } for path="/dev/socket/logdr" scontext=u:r:mediaswcodec:s0 tcontext=u:r:logd:s0 tclass=unix_stream_socket permissive=0 I auditd : type=1400 audit(0.0:1352): avc: denied { write } for comm="oid.avc.decoder" name="logdr" dev="tmpfs" ino=9467 scontext=u:r:mediaswcodec:s0 tcontext=u:object_r:logdr_socket:s0 tclass=sock_file permissive=0 crash log: https://pastebin.com/raw/Lhwhhbr0 Change-Id: Ia53ee584c82875e8bce032e0869ae58f60c52217
19 lines
663 B
Plaintext
19 lines
663 B
Plaintext
# ==============================================
|
|
# Common SEPolicy Rule
|
|
# ==============================================
|
|
|
|
# Date : WK19.25
|
|
# Operation : Migration
|
|
# Purpose : [ALPS04669482] DRTS failed due to avc denied
|
|
allow mediaswcodec debugfs_ion:dir rw_dir_perms;
|
|
allow mediaswcodec gpu_device:dir rw_dir_perms;
|
|
allow mediaswcodec gpu_device:chr_file rw_file_perms;
|
|
allow mediaswcodec dri_device:chr_file rw_file_perms;
|
|
|
|
# Date : WK20.38
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
allow mediaswcodec proc_ged:file rw_file_perms;
|
|
allowxperm mediaswcodec proc_ged:file ioctl { proc_ged_ioctls };
|
|
|
|
unix_socket_connect(mediaswcodec, logdr, logd)
|