SELinux is more and more annoying nowadays, we all know that... After spending hours to figure out why camera wasn't working while on enforcing mode, the audits finally showed up after booting into permissive mode. :S 05-31 01:19:55.133 877 877 I provider@2.4-se: type=1400 audit(0.0:456): avc: denied { read write } for name="capture" dev="sysfs" ino=116259 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 05-31 01:19:55.133 877 877 I provider@2.4-se: type=1400 audit(0.0:457): avc: denied { open } for path="/sys/kernel/tof_control/app0/capture" dev="sysfs" ino=116259 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 Change-Id: I1727b1a299a02f15b75dce9a4d5c72201f6632c3
27 lines
925 B
Text
27 lines
925 B
Text
# files
|
|
type oem_file, file_type;
|
|
type op1_file, file_type;
|
|
type op2_file, file_type;
|
|
type opf_file, file_type;
|
|
|
|
# procfs
|
|
type proc_direct_swappiness, fs_type, proc_type;
|
|
type proc_swappiness, fs_type, proc_type;
|
|
type proc_touchpanel, fs_type, proc_type;
|
|
type proc_watermark_boost_factor, fs_type, proc_type;
|
|
type procfs_oem_wireless, fs_type, proc_type;
|
|
|
|
# sysfs
|
|
type sysfs_dash_charger, fs_type, proc_type, sysfs_type;
|
|
type sysfs_dbg, fs_type, sysfs_type;
|
|
type sysfs_fod, fs_type, sysfs_type;
|
|
type sysfs_fsc, fs_type, sysfs_type;
|
|
type sysfs_fuse, fs_type, sysfs_type;
|
|
type sysfs_memplus, fs_type, sysfs_type;
|
|
type sysfs_ois_control, fs_type, sysfs_type;
|
|
type sysfs_project_info, fs_type, sysfs_type;
|
|
type sysfs_tof_control, fs_type, sysfs_type;
|
|
type sysfs_tpd, fs_type, sysfs_type;
|
|
type sysfs_tri_state_key, sysfs_type, fs_type;
|
|
type sysfs_vl53l1, fs_type, sysfs_type;
|
|
type vendor_sysfs_video_call_on, fs_type, sysfs_type;
|