bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-21 11:55:31 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7885: sepolicy: Resolve neverallows

Browse source 
libsepol.report_failure: neverallow on line 9 of device/samsung/universal7885-common/sepolicy/vendor/mediacodec.te (or line 60921 of policy.conf) violated by allow hal_power_default hal_power_hwservice:hwservice_manager { add };
libsepol.report_failure: neverallow on line 5 of system/sepolicy/public/hal_power.te (or line 19140 of policy.conf) violated by allow mediacodec hal_power_hwservice:hwservice_manager { find };
libsepol.report_failure: neverallow on line 5 of system/sepolicy/public/hal_power.te (or line 19132 of policy.conf) violated by allow mediacodec hal_power_hwservice:hwservice_manager { add };
libsepol.report_failure: neverallow on line 990 of system/sepolicy/public/domain.te (or line 13095 of policy.conf) violated by allow zygote vendor_file:file { read };
libsepol.report_failure: neverallow on line 861 of system/sepolicy/public/domain.te (or line 12818 of policy.conf) violated by allow hal_fingerprint_default fingerprintd_data_file:dir { write };
libsepol.report_failure: neverallow on line 861 of system/sepolicy/public/domain.te (or line 12818 of policy.conf) violated by allow rild radio_data_file:dir { search };
libsepol.report_failure: neverallow on line 861 of system/sepolicy/public/domain.te (or line 12818 of policy.conf) violated by allow hal_camera_default camera_data_file:dir { search };
libsepol.report_failure: neverallow on line 861 of system/sepolicy/public/domain.te (or line 12818 of policy.conf) violated by allow hal_drm_widevine media_data_file:dir { search };
libsepol.report_failure: neverallow on line 831 of system/sepolicy/public/domain.te (or line 12761 of policy.conf) violated by allow rild radio_data_file:file { lock open watch watch_reads };

Change-Id: I47cc5117dda055ca4041e666bb7ffa8a51f9a3d9
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
This commit is contained in:
SamarV-121 2021-07-14 23:42:06 +05:30 • committed by roynatech2544
commit ae0130bb13
6 changed files with 3 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

1
sepolicy/vendor/hal_camera_default.te vendored
View file

@ -7,7 +7,6 @@ allow hal_camera_default sysfs_virtual:dir search;
allow hal_camera_default sysfs_virtual:file rw_file_perms;
allow hal_camera_default sysfs_camera:dir search;
allow hal_camera_default sysfs_camera:file rw_file_perms;
allow hal_camera_default camera_data_file:dir search;
get_prop(hal_camera_default, exported_camera_prop)

1
sepolicy/vendor/hal_drm_widevine.te vendored
View file

@ -14,7 +14,6 @@ allow hal_drm_widevine hal_allocator_server:fd use;
allow hal_drm_widevine mediadrm_data_file:dir create_dir_perms;
allow hal_drm_widevine mediadrm_data_file:file create_file_perms;
allow hal_drm_widevine media_data_file:dir search;
allow hal_drm_widevine vendor_data_file:dir create_dir_perms;
allow hal_drm_widevine vendor_data_file:file create_file_perms;

2
sepolicy/vendor/hal_fingerprint_default.te vendored
View file

@ -1,3 +1,5 @@
typeattribute hal_fingerprint_default data_between_core_and_vendor_violators;
allow hal_fingerprint_default fingerprintd_data_file:dir write;
allow hal_fingerprint_default fingerprint_device:chr_file rw_file_perms;
allow hal_fingerprint_default sysfs_virtual:dir search;

5
sepolicy/vendor/mediacodec.te vendored
View file

@ -3,7 +3,4 @@ allow mediacodec sysfs_v4l:dir r_dir_perms;
allow mediacodec sysfs_v4l_mfc:dir search;
allow mediacodec sysfs_v4l_mfc:file r_file_perms;
binder_call(mediacodec, hal_power_default)
binder_call(hal_power_default, mediacodec)
add_hwservice(mediacodec, hal_power_hwservice)
hal_client_domain(mediacodec, hal_power);

2
sepolicy/vendor/rild.te vendored
View file

@ -8,8 +8,6 @@ allow rild bin_nv_data_efs_file:file create_file_perms;
allow rild radio_vendor_data_file:file create_file_perms;
allow rild radio_vendor_data_file:dir rw_dir_perms;
allow rild radio_data_file:file rw_file_perms;
allow rild radio_data_file:dir search;
allow rild proc_qtaguid_stat:file read;

2
sepolicy/vendor/zygote.te vendored
View file

@ -1,3 +1 @@
get_prop(zygote, exported_camera_prop);
# allow zygote system_file:dir write;
allow zygote vendor_file:file read;