SamarV-121
601b5ef5aa
universal7885: sepolicy: Allow tee to write efs_file
...
`W McDaemon.FSD2: type=1400 audit(0.0:98): avc: denied { write } for name="Store_1.tf" dev="mmcblk0p3" ino=28 scontext=u:r:tee:s0 tcontext=u:object_r:efs_file:s0 tclass=file permissive=0`
`I TeeMcDaemon: create: Create storage file "/mnt/vendor/efs/TEE/Store_1.tf" [hardware/samsung_slsi/exynos7885/mobicore/Daemon/src/FSD2.cpp:129]`
`E TeeMcDaemon: creating storage file failed with "Permission denied"(errno 13) [hardware/samsung_slsi/exynos7885/mobicore/Daemon/src/FSD2.cpp:144]`
Change-Id: I5f82cf2a25ed32203734b2f80aa041e99c66f17f
Signed-off-by: SamarV-121 <samarvispute121@pm.me>
2021-10-21 22:12:09 +09:00
SamarV-121
bea423e4a5
universal7885: sepolicy: Silence tee denial
...
- `I auditd : type=1107 audit(0.0:15): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for propertteey=sys.mobicoredaemon.enable pid=3585 uid=1000 gid=1000 scontext=u:r:tee:s0 tcontext=u:object_r:system_prop:s0 tclass=property_service permissive=0'`
- this prop is used nowhere
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
Change-Id: I823e09cd6ee98fded5855d71ccec2d5f91454611
2021-10-21 22:12:08 +09:00
SamarV-121
c4c7efdbac
universal7885: sepolicy: Nuke neverallows
...
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
Change-Id: Ie0339184617873ffe3b5dc25c277e740b34c8d86
2021-10-21 22:12:08 +09:00
SamarV-121
6cfb2d5778
universal7885: sepolicy: Remove mobicore and trustonic HAL rules from here
...
* Moved to common slsi sepolicy
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
Change-Id: I204b0eaad014f97166180b17678277c48a851491
2021-10-21 22:12:08 +09:00
SamarV-121
1875a501a1
universal7885: sepolicy: Adapt for universal7885 and address denials
...
* Everything's working fine now
* todo: Cleanup unnecessary rules and vendor init
Change-Id: I4faea56383b5851bbd486f45d103e0bb94ebdd24
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2021-10-21 22:12:08 +09:00
