android_device_samsung_a20/sepolicy/vendor/rild.te
SamarV-121 ae0130bb13 universal7885: sepolicy: Resolve neverallows
libsepol.report_failure: neverallow on line 9 of device/samsung/universal7885-common/sepolicy/vendor/mediacodec.te (or line 60921 of policy.conf) violated by allow hal_power_default hal_power_hwservice:hwservice_manager { add };
libsepol.report_failure: neverallow on line 5 of system/sepolicy/public/hal_power.te (or line 19140 of policy.conf) violated by allow mediacodec hal_power_hwservice:hwservice_manager { find };
libsepol.report_failure: neverallow on line 5 of system/sepolicy/public/hal_power.te (or line 19132 of policy.conf) violated by allow mediacodec hal_power_hwservice:hwservice_manager { add };
libsepol.report_failure: neverallow on line 990 of system/sepolicy/public/domain.te (or line 13095 of policy.conf) violated by allow zygote vendor_file:file { read };
libsepol.report_failure: neverallow on line 861 of system/sepolicy/public/domain.te (or line 12818 of policy.conf) violated by allow hal_fingerprint_default fingerprintd_data_file:dir { write };
libsepol.report_failure: neverallow on line 861 of system/sepolicy/public/domain.te (or line 12818 of policy.conf) violated by allow rild radio_data_file:dir { search };
libsepol.report_failure: neverallow on line 861 of system/sepolicy/public/domain.te (or line 12818 of policy.conf) violated by allow hal_camera_default camera_data_file:dir { search };
libsepol.report_failure: neverallow on line 861 of system/sepolicy/public/domain.te (or line 12818 of policy.conf) violated by allow hal_drm_widevine media_data_file:dir { search };
libsepol.report_failure: neverallow on line 831 of system/sepolicy/public/domain.te (or line 12761 of policy.conf) violated by allow rild radio_data_file:file { lock open watch watch_reads };

Change-Id: I47cc5117dda055ca4041e666bb7ffa8a51f9a3d9
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2021-10-21 22:12:08 +09:00

28 lines
748 B
Text

allow rild proc_net:file write;
allow rild vendor_data_file:file create_file_perms;
# /dev/umts_ipc0
allow rild radio_device:chr_file ioctl;
allow rild bin_nv_data_efs_file:file create_file_perms;
allow rild radio_vendor_data_file:file create_file_perms;
allow rild radio_vendor_data_file:dir rw_dir_perms;
allow rild proc_qtaguid_stat:file read;
allow rild factoryprop_efs_file:file rw_file_perms;
allow rild init:file getattr;
# binder
allow rild hal_radio_default:binder call;
# audio
allow rild hal_audio_default:dir search;
allow rild hal_audio_default:file r_file_perms;
# hwservice
add_hwservice(rild, hal_sec_radio_hwservice)
add_hwservice(rild, hal_sec_radio_bridge_hwservice)
add_hwservice(rild, hal_sec_radio_channel_hwservice)