6461e33428
Solves error: 1
2-13 18:33:15.860000 root 1019 1019 I auditd : type=1400 audit(0.0:7): avc: denied { read } for comm="aocd" name="u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=404 scontext=u:r:aocd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
Test: on device
Bug: 207711097
Change-Id: Ia28e1622746cca973ca66f437e0e655bbcaf7d66
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
24 lines
675 B
Plaintext
24 lines
675 B
Plaintext
type aocd, domain;
|
|
type aocd_exec, vendor_file_type, exec_type, file_type;
|
|
init_daemon_domain(aocd)
|
|
|
|
# access persist files
|
|
allow aocd mnt_vendor_file:dir search;
|
|
allow aocd persist_file:dir search;
|
|
r_dir_file(aocd, persist_aoc_file);
|
|
|
|
# sysfs operations
|
|
allow aocd sysfs_aoc:dir search;
|
|
allow aocd sysfs_aoc_firmware:file w_file_perms;
|
|
allow aocd sysfs_aoc_notifytimeout:file r_file_perms;
|
|
|
|
# dev operations
|
|
allow aocd aoc_device:chr_file rw_file_perms;
|
|
|
|
# allow inotify to watch for additions/removals from /dev
|
|
allow aocd device:dir r_dir_perms;
|
|
|
|
# set properties
|
|
set_prop(aocd, vendor_aoc_prop)
|
|
set_prop(aocd, vendor_timeout_aoc_prop)
|
|
get_prop(aocd, vendor_volte_mif_off) |