From 2ccf864f314a0cc9b30559ed8c4a28adf3ad189a Mon Sep 17 00:00:00 2001 From: Aayush Gupta Date: Mon, 28 Sep 2020 18:33:28 +0000 Subject: [PATCH] sdm660-common: Address denials regarding to access sysfs_kgsl [ 22.419451] type=1400 audit(1601312073.698:17): avc: denied { search } for comm="ImageWallpaper" name="kgsl-3d0" dev="sysfs" ino=29220 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:sysfs_kgsl:s0 tclass=dir permissive=0 app=com.android.systemui [ 9.476242] type=1400 audit(1601312065.534:13): avc: denied { search } for comm="BootAnimation" name="kgsl-3d0" dev="sysfs" ino=29220 scontext=u:r:bootanim:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=dir permissive=0 Change-Id: I80c5de2d9687b3127922d5bc55c26461a797d0f9 Signed-off-by: Aayush Gupta Signed-off-by: Subhajeet Muhuri --- sepolicy/vendor/bootanim.te | 1 + sepolicy/vendor/platform_app.te | 1 + 2 files changed, 2 insertions(+) create mode 100644 sepolicy/vendor/bootanim.te create mode 100644 sepolicy/vendor/platform_app.te diff --git a/sepolicy/vendor/bootanim.te b/sepolicy/vendor/bootanim.te new file mode 100644 index 00000000..055cc40b --- /dev/null +++ b/sepolicy/vendor/bootanim.te @@ -0,0 +1 @@ +allow bootanim sysfs_kgsl:dir search; diff --git a/sepolicy/vendor/platform_app.te b/sepolicy/vendor/platform_app.te new file mode 100644 index 00000000..ace04505 --- /dev/null +++ b/sepolicy/vendor/platform_app.te @@ -0,0 +1 @@ +allow platform_app sysfs_kgsl:dir search;