sepolicy:qcc: allow IPerf

avc:  denied  { find } for interface=vendor.qti.hardware.perf::IPerf
sid=u:r:vendor_qcc_netstat_app:s0:c202,c256,c512,c768 pid=3430
scontext=u:r:vendor_qcc_netstat_app:s0:c202,c256,c512,c768
tcontext=u:object_r:vendor_hal_perf_hwservice:s0 tclass=hwservice_manager permissive=0

avc: denied { search } for comm="omm.qti.qcclmtp" name="0" dev="dm-10" ino=504
scontext=u:r:vendor_qcc_lmtp_app:s0
tcontext=u:object_r:system_data_file:s0:c512,c768 tclass=dir permissive=0

avc: denied { search } for comm="omm.qti.qcclmtp" name="0" dev="dm-10" ino=500
scontext=u:r:vendor_qcc_lmtp_app:s0
tcontext=u:object_r:user_profile_root_file:s0:c512,c768 tclass=dir permissive=0

Change-Id: I335aebb35025ae0f3533c4f93d34cfb3dd381783
This commit is contained in:
Shawn Shin
2021-03-26 15:54:16 -07:00
committed by Gerrit - the friendly Code Review server
parent 99f75a3fe8
commit aab05e87df
2 changed files with 2 additions and 0 deletions

View File

@@ -26,6 +26,7 @@
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
userdebug_or_eng(`
typeattribute vendor_qcc_lmtp_app mlstrustedsubject;
app_domain(vendor_qcc_lmtp_app)
net_domain(vendor_qcc_lmtp_app)
binder_use(vendor_qcc_lmtp_app)

View File

@@ -31,6 +31,7 @@ app_domain(vendor_qcc_netstat_app)
net_domain(vendor_qcc_netstat_app)
binder_use(vendor_qcc_netstat_app)
hal_client_domain(vendor_qcc_netstat_app, vendor_hal_perf);
allow vendor_qcc_netstat_app {app_api_service}:service_manager find;
# Allow read-write permissions to qdma sockets under vendor_qcc_app_socket.