device_lenovo_sdm710-common/sepolicy/vendor/system_app.te

# Allow KProfiles to be adjusted by a system app
allow system_app sysfs_kprofiles:file rw_file_perms;

allow system_app zygote:unix_stream_socket getopt;
sdm710-common: Build KProfiles - Inherit KProfiles. - Address sepolicy. - Define sysfs_kprofiles as a domain. - Fix permission of nodes relevant to KProfiles at boot. Signed-off-by: Cyber Knight <cyberknight755@gmail.com> 2022-06-16 14:12:27 -04:00			`# Allow KProfiles to be adjusted by a system app`
sdm710-common: sepolicy: Allow zygote to access unix_stream_socket W FinalizerDaemon: type=1400 audit(0.0:232): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:system_app:s0 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 W FinalizerDaemon: type=1400 audit(0.0:355): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:platform_app:s0:c512,c768 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 app=com.motorola.dolby.dolbyui *W FinalizerDaemon: type=1400 audit(0.0:438): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:priv_app:s0:c512,c768 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 app=com.android.wallpaper 2022-05-07 13:44:12 -04:00			`allow system_app sysfs_kprofiles:file rw_file_perms;`

			`allow system_app zygote:unix_stream_socket getopt;`