diff options
| author | Vaishali Rai <quic_vailani@quicinc.com> | 2023-04-06 10:26:06 +0530 |
|---|---|---|
| committer | Vaishali Rai <quic_vailani@quicinc.com> | 2023-04-06 10:40:44 +0530 |
| commit | 1a332e6b327f5b0e6d2524948dba5f327994e749 (patch) | |
| tree | 37440ec99f6253c89e09b5974ff5ac16b794fd0d | |
| parent | ffdc6e3a5c8e139b170152970cd1df1f15b881a6 (diff) | |
* sepolicy_vndr: fix for AVC denial for U upgrade targets
* I/auditd ( 963): avc: denied { find } for pid=3614 uid=10149
* name=vendor.qti.ImsRtpService.IRTPService/ImsRtpService
* scontext=u:r:vendor_qtelephony:s0:c149,c256,c512,c768
* tcontext=u:object_r:default_android_service:s0
* tclass=service_manager permissive=0
*
* add dontaudit rule for U upgrades since
* AServiceManager_isDeclared does find operation internally
Change-Id: I820e73f39be4b6f25eda24619abaae9ae92ce34a
| -rw-r--r-- | generic/vendor/common/qtelephony.te | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/generic/vendor/common/qtelephony.te b/generic/vendor/common/qtelephony.te index 19058e26..c708c47d 100644 --- a/generic/vendor/common/qtelephony.te +++ b/generic/vendor/common/qtelephony.te @@ -32,5 +32,7 @@ get_prop(vendor_qtelephony, vendor_audio_prop) get_prop(vendor_qtelephony, vendor_video_prop) allow vendor_qtelephony vendor_hal_imsrtp_hwservice:hwservice_manager find; +#dontaudit for U upgrade since AServiceManager_isDeclared internally does find +dontaudit vendor_qtelephony default_android_service:service_manager find; binder_call(vendor_qtelephony, vendor_hal_imsrtp) hal_client_domain(vendor_qtelephony , vendor_hal_datafactory_qti) |