Paul Crowley bd627e8b90 msm8974-common: sepolicy: allow tee system_data_root_file:dir r_dir_perms; ... aosp/1106014 introduces a new class system_data_root_file and tee needs access to that as well as system_data_file. 09-09 20:26:53.639 645 645 I auditd : type=1400 audit(0.0:9): avc: denied { read } for comm="qseecomd" name="/" dev="dm-2" ino=2 scontext=u:r:tee:s0 tcontext=u:object_r:system_data_root_file:s0 tclass=dir permissive=1 09-09 20:26:53.639 645 645 I qseecomd: type=1400 audit(0.0:9): avc: denied { read } for name="/" dev="dm-2" ino=2 scontext=u:r:tee:s0 tcontext=u:object_r:system_data_root_file:s0 tclass=dir permissive=1 09-09 20:26:53.639 645 645 I auditd : type=1400 audit(0.0:10): avc: denied { open } for comm="qseecomd" path="/data" dev="dm-2" ino=2 scontext=u:r:tee:s0 tcontext=u:object_r:system_data_root_file:s0 tclass=dir permissive=1 09-09 20:26:53.639 645 645 I qseecomd: type=1400 audit(0.0:10): avc: denied { open } for path="/data" dev="dm-2" ino=2 scontext=u:r:tee:s0 tcontext=u:object_r:system_data_root_file:s0 tclass=dir permissive=1 Bug: 140402208 Test: Flash Taimen device, enroll fingerprint, check log for denials Change-Id: Ie976d7bbe4aeba875b96b6b82a94734b71ba1cb9		2020-12-30 07:52:16 -07:00
..
common	msm8974-common: sepolicy: allow tee system_data_root_file:dir r_dir_perms;	2020-12-30 07:52:16 -07:00
private	msm8974-common: sepolicy: Allow system_app to access storaged via IPC	2020-09-06 04:12:10 -06:00
sepolicy.mk	msm8974-common: sepolicy: Allow system_app to access storaged via IPC	2020-09-06 04:12:10 -06:00