Bruce Po e15af041dd Fix aocx selinux dumpstate permissions ...

After switching aocxd to stable AIDL, we encountered some permissions
issues associated with dumpstate:

dumpstate: type=1400 audit(0.0:548): avc:  denied  { call } for  scontext=u:r:dumpstate:s0 tcontext=u:r:aocxd:s0 tclass=binder permissive=0

dumpstate: type=1400 audit(0.0:17): avc:  denied  { use } for  path="pipe:[214567]" dev="pipefs" ino=214567 scontext=u:r:aocxd:s0 tcontext=u:r:dumpstate:s0 tclass=fd permissive=0

dumpstate: type=1400 audit(0.0:15): avc:  denied  { write } for  path="pipe:[212933]" dev="pipefs" ino=212933 scontext=u:r:aocxd:s0 tcontext=u:r:dumpstate:s0 tclass=fifo_file permissive=0

TEST:
make selinux_policy -j128
adb push $ANDROID_PRODUCT_OUT/vendor/etc/selinux/* /vendor/etc/selinux
adb reboot
adb root
adb bugreport

BUG: 347156752
Change-Id: I188263ee9b186736a48fd3a0cfa83745e2e54108

2024-06-14 15:36:14 -07:00

..

conf

move aoc settings to gs-common

2022-10-20 11:23:26 +08:00

sepolicy

Fix aocx selinux dumpstate permissions

2024-06-14 15:36:14 -07:00

Android.bp

create a lib to hold commonly used functions

2022-10-18 13:38:13 +08:00

aoc.mk

selinux: New aocx service

2024-01-08 17:57:03 +00:00

dump_aoc.cpp

Dumpstate: add DVFSA32 and lengthen timeouts for memory_votes_*

2024-03-19 08:19:10 +00:00