From a25d1ca12fe24ee1f15244c2c13753dab31d4fe4 Mon Sep 17 00:00:00 2001 From: Kobe Wu Date: Sat, 18 Jan 2020 10:10:18 +0800 Subject: [PATCH] [ALPS04400836] Fix SELinux issue [Detail] avc: denied { find } for interface=android.hardware.audio:: IDevicesFactory sid=u:r:audiocmdservice_atci:s0 pid=4193 scontext=u:r: audiocmdservice_atci:s0 tcontext=u:object_r:hal_audio_hwservice:s0 tclass=hwservice_manager permissive=0 [Solution] hal_client_domain(audiocmdservice_atci, hal_audio) allow audiocmdservice_atci hal_audio_hwservice:hwservice_manager find; MTK-Commit-Id: 19954438860104bb7e0036ce92d21429103e6149 Change-Id: Idc7fe552e63aec6e4e1081a0f4681d251b019be3 CR-Id: ALPS04400836 Feature: Audio Tuning Tool Signed-off-by: Kobe Wu --- non_plat/audiocmdservice_atci.te | 2 ++ prebuilts/api/26.0/plat_private/audiocmdservice_atci.te | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/non_plat/audiocmdservice_atci.te b/non_plat/audiocmdservice_atci.te index 1018f31..7be9753 100644 --- a/non_plat/audiocmdservice_atci.te +++ b/non_plat/audiocmdservice_atci.te @@ -24,6 +24,8 @@ hwbinder_use(audiocmdservice_atci) get_prop(audiocmdservice_atci, hwservicemanager_prop); #allow audiocmdservice_atci hal_audio_hwservice:hwservice_manager find; +hal_client_domain(audiocmdservice_atci, hal_audio) + #To access the file at /dev/kmsg allow audiocmdservice_atci kmsg_device:chr_file w_file_perms; diff --git a/prebuilts/api/26.0/plat_private/audiocmdservice_atci.te b/prebuilts/api/26.0/plat_private/audiocmdservice_atci.te index d907260..af40b45 100755 --- a/prebuilts/api/26.0/plat_private/audiocmdservice_atci.te +++ b/prebuilts/api/26.0/plat_private/audiocmdservice_atci.te @@ -31,7 +31,7 @@ allow audiocmdservice_atci sdcard_type:dir w_dir_perms; allow audiocmdservice_atci media_rw_data_file:dir create_dir_perms; allow audiocmdservice_atci media_rw_data_file:file create_file_perms; - +hal_client_domain(audiocmdservice_atci, hal_audio) #To access the file at /dev/kmsg allow audiocmdservice_atci kmsg_device:chr_file w_file_perms;