donjohanliebert/device_motorola_sm7325-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sm8250-common: sepolicy: allow vendor_file execute_no_trans

Browse Source 
In some cases vendor_init_fingerprint, vendor_init_hw,
and vendor_qti_init_shell were not allowed to execute setprop/getprop

This caused ril and fingerprint, as well as partially sensors to fail.

Log:
avc:  denied  { execute_no_trans } for  pid=613 comm="init.oem.hw.sh" path="/vendor/bin/setprop" dev="overlay" ino=32565 scontext=u:r:vendor_init_hw:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
avc: denied { execute_no_trans } for comm="init.qcom.early" path="/vendor/bin/getprop" dev="overlay" ino=34132 scontext=u:r:vendor_qti_init_shell:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
avc: denied { execute_no_trans } for comm="init.oem.finger" path="/vendor/bin/getprop" dev="overlay" ino=34132 scontext=u:r:vendor_init_fingerprint:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
avc: denied { execute_no_trans } for comm="init.qcom.post_" path="/vendor/bin/getprop" dev="overlay" ino=34132 scontext=u:r:vendor_qti_init_shell:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0
This commit is contained in:
SGCMarkus 2022-03-09 22:49:45 +01:00
parent bc6c1abac1
commit 7ad58f9629
3 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sepolicy/vendor/vendor_init_fingerprint.te vendored
View File

@ -11,3 +11,5 @@ allow vendor_init_fingerprint mnt_vendor_file:dir search;
set_prop(vendor_init_fingerprint, ctl_start_prop) set_prop(vendor_init_fingerprint, ctl_start_prop)
set_prop(vendor_init_fingerprint, vendor_mot_fingerprint_prop) set_prop(vendor_init_fingerprint, vendor_mot_fingerprint_prop)
allow vendor_init_fingerprint vendor_file:file execute_no_trans;

2
sepolicy/vendor/vendor_init_hw.te vendored
View File

@ -13,3 +13,5 @@ allow vendor_init_hw vendor_toolbox_exec:file rx_file_perms;
set_prop(vendor_init_hw, vendor_mot_hw_prop) set_prop(vendor_init_hw, vendor_mot_hw_prop)
set_prop(vendor_init_hw, vendor_mot_touch_prop) set_prop(vendor_init_hw, vendor_mot_touch_prop)
allow vendor_init_hw vendor_file:file execute_no_trans;

2
sepolicy/vendor/vendor_qti_init_shell.te vendored
View File

@ -2,3 +2,5 @@ allow vendor_qti_init_shell configfs:dir create_dir_perms;
allow vendor_qti_init_shell configfs:file create_file_perms; allow vendor_qti_init_shell configfs:file create_file_perms;
allow vendor_qti_init_shell configfs:lnk_file create_file_perms; allow vendor_qti_init_shell configfs:lnk_file create_file_perms;
allow vendor_qti_init_shell proc_page_cluster:file w_file_perms; allow vendor_qti_init_shell proc_page_cluster:file w_file_perms;
allow vendor_qti_init_shell vendor_file:file execute_no_trans;