avc: denied { read } for name="modem_state" dev="sysfs" ino=77641 scontext=u:r:gnssd:s0 tcontext=u:object_r:sysfs_modem_state:s0 tclass=file avc: denied { open } for path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=77641 scontext=u:r:gnssd:s0 tcontext=u:object_r:sysfs_modem_state:s0 tclass=file avc: denied { getattr } for path="/sys/devices/platform/cpif/modem_state" dev="sysfs" ino=77641 scontext=u:r:gnssd:s0 tcontext=u:object_r:sysfs_modem_state:s0 tclass=file Bug: 342284863 Test: b/342284863 for boot-health check. Test: b/342284863 for function verification. Change-Id: I1accfe367915737c14ee79dce71fe04cdcdbb727
37 lines
1.0 KiB
Plaintext
37 lines
1.0 KiB
Plaintext
type gnssd, domain;
|
|
type gnssd_exec, exec_type, vendor_file_type, file_type;
|
|
init_daemon_domain(gnssd);
|
|
|
|
# Allow gnssd to access rild
|
|
binder_call(gnssd, rild);
|
|
binder_call(gnssd, hwservicemanager)
|
|
allow gnssd hal_exynos_rild_hwservice:hwservice_manager find;
|
|
allow gnssd radio_device:chr_file rw_file_perms;
|
|
|
|
# Allow gnssd to acess gnss device
|
|
allow gnssd vendor_gnss_device:chr_file rw_file_perms;
|
|
allow gnssd vendor_gps_file:dir create_dir_perms;
|
|
allow gnssd vendor_gps_file:file create_file_perms;
|
|
allow gnssd vendor_gps_file:fifo_file create_file_perms;
|
|
|
|
# Allow gnssd to obtain wakelock
|
|
wakelock_use(gnssd)
|
|
|
|
# Allow a base set of permissions required for network access.
|
|
net_domain(gnssd);
|
|
|
|
# Allow gnssd to get boot complete
|
|
get_prop(gnssd, bootanim_system_prop)
|
|
|
|
allow gnssd sysfs_soc:file r_file_perms;
|
|
allow gnssd sysfs_gps:file rw_file_perms;
|
|
|
|
# Allow gnssd to set GPS property
|
|
set_prop(gnssd, vendor_gps_prop)
|
|
|
|
# Read RIL property
|
|
get_prop(gnssd, vendor_rild_prop)
|
|
|
|
# Read modme state
|
|
allow gnssd sysfs_modem_state:file r_file_perms;
|