lineage/android_device_samsung_msm8974-common
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

msm8974-common: sepolicy: Label sysfs_msm_perf, resolve denials

Browse Source 
* avc: denied { write } for name="suspend_enabled" dev="sysfs"
  ino=10567 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_perf:s0
  tclass=file permissive=1
* avc: denied { open } for name="suspend_enabled" dev="sysfs"
  ino=10567 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_perf:s0
  tclass=file permissive=1

Change-Id: I23d69f0442d126b2a6ac3aaeda5032856a4483f2
This commit is contained in:
Kevin F. Haggerty 2018-11-13 22:09:58 -07:00
parent 27afbf1dc6
commit c39a735ab5
No known key found for this signature in database
GPG Key ID: 6D95512933112729
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sepolicy/common/file_contexts
View File

@ -46,6 +46,9 @@
# sysfs - block/storage # sysfs - block/storage
/sys/devices/msm_sdcc\.[0-9]/mmc_host/mmc[0-9]/mmc[0-9]:[0-9]+/block/mmcblk[0-9]/stat u:object_r:sysfs_disk_stat:s0 /sys/devices/msm_sdcc\.[0-9]/mmc_host/mmc[0-9]/mmc[0-9]:[0-9]+/block/mmcblk[0-9]/stat u:object_r:sysfs_disk_stat:s0
# sysfs - cpu/perf
/sys/module/msm_pm/modes/cpu[0-9](/.*)? u:object_r:sysfs_msm_perf:s0
# sysfs - graphics/panel # sysfs - graphics/panel
/sys/class/mhl(/.*)? u:object_r:sysfs_graphics:s0 /sys/class/mhl(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/mdp\.[0-9](/.*)? u:object_r:sysfs_graphics:s0 /sys/devices/mdp\.[0-9](/.*)? u:object_r:sysfs_graphics:s0

7
sepolicy/common/init.te
View File

@ -7,8 +7,6 @@ allow init sysfs_input:file rw_file_perms;
allow init sysfs_graphics:file r_file_perms; allow init sysfs_graphics:file r_file_perms;
allow init sysfs_sec_key:file w_file_perms;
allow init { allow init {
sysfs_batteryinfo sysfs_batteryinfo
sysfs_graphics sysfs_graphics
@ -27,3 +25,8 @@ allow init {
sysfs_sec_touchkey sysfs_sec_touchkey
sysfs_sec_tsp sysfs_sec_tsp
}:file setattr; }:file setattr;
allow init {
sysfs_msm_perf
sysfs_sec_key
}:file w_file_perms;