diff options
| author | Alex Iacobucci <alexiacobucci@google.com> | 2023-12-13 19:22:28 +0000 |
|---|---|---|
| committer | Alex Iacobucci <alexiacobucci@google.com> | 2023-12-13 19:32:43 +0000 |
| commit | 6461e334288c6b397ff3d422d347eccf8d791417 (patch) | |
| tree | fe0df67c4b793a6e83da98cf428ca7b139c29b15 | |
| parent | 37493030ccdd77a1686d38485abafba81da91c3c (diff) | |
| download | gs-common-6461e334288c6b397ff3d422d347eccf8d791417.tar.gz | |
aoc: add policy to read system property
Solves error: 1
2-13 18:33:15.860000 root 1019 1019 I auditd : type=1400 audit(0.0:7): avc: denied { read } for comm="aocd" name="u:object_r:vendor_rild_prop:s0" dev="tmpfs" ino=404 scontext=u:r:aocd:s0 tcontext=u:object_r:vendor_rild_prop:s0 tclass=file permissive=0
Test: on device
Bug: 207711097
Change-Id: Ia28e1622746cca973ca66f437e0e655bbcaf7d66
Signed-off-by: Alex Iacobucci <alexiacobucci@google.com>
| -rw-r--r-- | aoc/sepolicy/aocd.te | 3 | ||||
| -rw-r--r-- | aoc/sepolicy/property.te | 3 | ||||
| -rw-r--r-- | aoc/sepolicy/property_contexts | 3 |
3 files changed, 6 insertions, 3 deletions
diff --git a/aoc/sepolicy/aocd.te b/aoc/sepolicy/aocd.te index b2bfd13..464e46b 100644 --- a/aoc/sepolicy/aocd.te +++ b/aoc/sepolicy/aocd.te @@ -20,4 +20,5 @@ allow aocd device:dir r_dir_perms; # set properties set_prop(aocd, vendor_aoc_prop) -set_prop(aocd, vendor_timeout_aoc_prop)
\ No newline at end of file +set_prop(aocd, vendor_timeout_aoc_prop) +get_prop(aocd, vendor_volte_mif_off)
\ No newline at end of file diff --git a/aoc/sepolicy/property.te b/aoc/sepolicy/property.te index c2f5695..e6d715b 100644 --- a/aoc/sepolicy/property.te +++ b/aoc/sepolicy/property.te @@ -1,3 +1,4 @@ # AoC vendor_internal_prop(vendor_aoc_prop) -vendor_internal_prop(vendor_timeout_aoc_prop)
\ No newline at end of file +vendor_internal_prop(vendor_timeout_aoc_prop) +vendor_internal_prop(vendor_volte_mif_off) diff --git a/aoc/sepolicy/property_contexts b/aoc/sepolicy/property_contexts index 3c2acb6..475272a 100644 --- a/aoc/sepolicy/property_contexts +++ b/aoc/sepolicy/property_contexts @@ -1,3 +1,4 @@ # AoC vendor.aoc.firmware.version u:object_r:vendor_aoc_prop:s0 -persist.vendor.aoc.status_request_timed_out u:object_r:vendor_timeout_aoc_prop:s0
\ No newline at end of file +persist.vendor.aoc.status_request_timed_out u:object_r:vendor_timeout_aoc_prop:s0 +persist.vendor.radio.volte_mif_off u:object_r:vendor_volte_mif_off:s0
\ No newline at end of file |