Skip to content
Snippets Groups Projects
Select Git revision
  • android-7.1.2_r28_klist
  • master default protected
  • pie-cts-release
  • pie-vts-release
  • pie-cts-dev
  • oreo-mr1-iot-release
  • sdk-release
  • oreo-m6-s4-release
  • oreo-m4-s12-release
  • pie-release
  • pie-r2-release
  • pie-r2-s1-release
  • oreo-vts-release
  • oreo-cts-release
  • oreo-dev
  • oreo-mr1-dev
  • pie-gsi
  • pie-platform-release
  • pie-dev
  • oreo-cts-dev
  • android-o-mr1-iot-release-1.0.4
  • android-9.0.0_r8
  • android-9.0.0_r7
  • android-9.0.0_r6
  • android-9.0.0_r5
  • android-8.1.0_r46
  • android-8.1.0_r45
  • android-n-iot-release-smart-display-r2
  • android-vts-8.1_r5
  • android-cts-8.1_r8
  • android-cts-8.0_r12
  • android-cts-7.1_r20
  • android-cts-7.0_r24
  • android-o-mr1-iot-release-1.0.3
  • android-cts-9.0_r1
  • android-8.1.0_r43
  • android-8.1.0_r42
  • android-n-iot-release-smart-display
  • android-p-preview-5
  • android-9.0.0_r3
40 results

app.te

Blame
    • Robert Craig's avatar
      fc4c6b79
      Allow all appdomains to grab file attributes of wallpaper_file. · fc4c6b79
      Robert Craig authored
      
      When setting a static wallpaper on multiple devices the
      following denials were encountered.
         avc:  denied  { getattr } for  pid=1775 comm="llpaper_chooser" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:shared_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
         avc:  denied  { getattr } for  pid=799 comm="ndroid.systemui" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:platform_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
         avc:  denied  { getattr } for  pid=1909 comm=4173796E635461736B202332 path="/data/system/users/0/wallpaper" dev="mmcblk0p28" ino=586422 scontext=u:r:release_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
      
      platform_app access is from the SystemUI app whereas the other
      denials are from the Launcher that is used on the particular
      device. For instance, Launcher2 triggers the shared_app denial
      whereas release_app (used by Launcher3) triggers the other denial.
      Because of this, add the rule to all appdomains.
      
      The static wallpaper is still set without this change. Just add
      the rule to avoid the noise in the logs.
      
      Change-Id: Ida84d1695d52379d67b87318403f629fd07109a4
      Signed-off-by: default avatarrpcraig <rpcraig@tycho.ncsc.mil>
      fc4c6b79
      History
      Allow all appdomains to grab file attributes of wallpaper_file.
      Robert Craig authored
      
      When setting a static wallpaper on multiple devices the
      following denials were encountered.
         avc:  denied  { getattr } for  pid=1775 comm="llpaper_chooser" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:shared_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
         avc:  denied  { getattr } for  pid=799 comm="ndroid.systemui" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:platform_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
         avc:  denied  { getattr } for  pid=1909 comm=4173796E635461736B202332 path="/data/system/users/0/wallpaper" dev="mmcblk0p28" ino=586422 scontext=u:r:release_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
      
      platform_app access is from the SystemUI app whereas the other
      denials are from the Launcher that is used on the particular
      device. For instance, Launcher2 triggers the shared_app denial
      whereas release_app (used by Launcher3) triggers the other denial.
      Because of this, add the rule to all appdomains.
      
      The static wallpaper is still set without this change. Just add
      the rule to avoid the noise in the logs.
      
      Change-Id: Ida84d1695d52379d67b87318403f629fd07109a4
      Signed-off-by: default avatarrpcraig <rpcraig@tycho.ncsc.mil>