Skip to content
Snippets Groups Projects
  • Nick Kralevich's avatar
    2c8ea36a
    Get rid of more auditallow spam · 2c8ea36a
    Nick Kralevich authored
    Addresses the following audit messages:
    
    [    7.984957] type=1400 audit(33873666.610:40): avc: granted { getattr
    } for pid=1 comm="init" name="system@framework@boot-ext.art" dev="dm-2"
    ino=106324 scontext=u:r:init:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=file
    
    [   65.528068] type=1400 audit(1477751916.508:96): avc: granted { search
    } for pid=6330 comm="main" name="/" dev="cgroup" ino=12428
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.530425] type=1400 audit(1477751916.508:97): avc: granted { search
    } for pid=6330 comm="main" name="/" dev="cgroup" ino=12428
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.530487] type=1400 audit(1477751916.508:98): avc: granted { open }
    for pid=6330 comm="main" path="/dev/cpuctl/tasks" dev="cgroup" ino=12429
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=file
    
    [   65.530800] type=1400 audit(1477751916.508:98): avc: granted { open }
    for pid=6330 comm="main" path="/dev/cpuctl/tasks" dev="cgroup" ino=12429
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=file
    
    [   65.530842] type=1400 audit(1477751916.508:99): avc: granted { search
    } for pid=6330 comm="main" name="/" dev="cgroup" ino=12428
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.531138] type=1400 audit(1477751916.508:99): avc: granted { search
    } for pid=6330 comm="main" name="/" dev="cgroup" ino=12428
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.531176] type=1400 audit(1477751916.508:100): avc: granted {
    search } for pid=6330 comm="main" name="bg_non_interactive" dev="cgroup"
    ino=12444 scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0
    tclass=dir
    
    [   65.531465] type=1400 audit(1477751916.508:100): avc: granted {
    search } for pid=6330 comm="main" name="bg_non_interactive" dev="cgroup"
    ino=12444 scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0
    tclass=dir
    
    [   65.531502] type=1400 audit(1477751916.508:101): avc: granted { open
    } for pid=6330 comm="main" path="/dev/cpuctl/bg_non_interactive/tasks"
    dev="cgroup" ino=12445 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:cgroup:s0 tclass=file
    
    [   65.531789] type=1400 audit(1477751916.508:101): avc: granted { open
    } for pid=6330 comm="main" path="/dev/cpuctl/bg_non_interactive/tasks"
    dev="cgroup" ino=12445 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:cgroup:s0 tclass=file
    
    [   65.531827] type=1400 audit(1477751916.508:102): avc: granted {
    search } for pid=6330 comm="main" name="/" dev="cgroup" ino=12459
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.713056] type=1400 audit(1477751916.508:102): avc: granted {
    search } for pid=6330 comm="main" name="/" dev="cgroup" ino=12459
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    Bug: 32246161
    Test: policy compiles
    Test: dumpstate no longer generates the audit messages above.
    Change-Id: Id5afe2ebeb24f8a7407aac1a0a09806b1521b0e4
    2c8ea36a
    History
    Get rid of more auditallow spam
    Nick Kralevich authored
    Addresses the following audit messages:
    
    [    7.984957] type=1400 audit(33873666.610:40): avc: granted { getattr
    } for pid=1 comm="init" name="system@framework@boot-ext.art" dev="dm-2"
    ino=106324 scontext=u:r:init:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=file
    
    [   65.528068] type=1400 audit(1477751916.508:96): avc: granted { search
    } for pid=6330 comm="main" name="/" dev="cgroup" ino=12428
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.530425] type=1400 audit(1477751916.508:97): avc: granted { search
    } for pid=6330 comm="main" name="/" dev="cgroup" ino=12428
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.530487] type=1400 audit(1477751916.508:98): avc: granted { open }
    for pid=6330 comm="main" path="/dev/cpuctl/tasks" dev="cgroup" ino=12429
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=file
    
    [   65.530800] type=1400 audit(1477751916.508:98): avc: granted { open }
    for pid=6330 comm="main" path="/dev/cpuctl/tasks" dev="cgroup" ino=12429
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=file
    
    [   65.530842] type=1400 audit(1477751916.508:99): avc: granted { search
    } for pid=6330 comm="main" name="/" dev="cgroup" ino=12428
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.531138] type=1400 audit(1477751916.508:99): avc: granted { search
    } for pid=6330 comm="main" name="/" dev="cgroup" ino=12428
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.531176] type=1400 audit(1477751916.508:100): avc: granted {
    search } for pid=6330 comm="main" name="bg_non_interactive" dev="cgroup"
    ino=12444 scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0
    tclass=dir
    
    [   65.531465] type=1400 audit(1477751916.508:100): avc: granted {
    search } for pid=6330 comm="main" name="bg_non_interactive" dev="cgroup"
    ino=12444 scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0
    tclass=dir
    
    [   65.531502] type=1400 audit(1477751916.508:101): avc: granted { open
    } for pid=6330 comm="main" path="/dev/cpuctl/bg_non_interactive/tasks"
    dev="cgroup" ino=12445 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:cgroup:s0 tclass=file
    
    [   65.531789] type=1400 audit(1477751916.508:101): avc: granted { open
    } for pid=6330 comm="main" path="/dev/cpuctl/bg_non_interactive/tasks"
    dev="cgroup" ino=12445 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:cgroup:s0 tclass=file
    
    [   65.531827] type=1400 audit(1477751916.508:102): avc: granted {
    search } for pid=6330 comm="main" name="/" dev="cgroup" ino=12459
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    [   65.713056] type=1400 audit(1477751916.508:102): avc: granted {
    search } for pid=6330 comm="main" name="/" dev="cgroup" ino=12459
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:cgroup:s0 tclass=dir
    
    Bug: 32246161
    Test: policy compiles
    Test: dumpstate no longer generates the audit messages above.
    Change-Id: Id5afe2ebeb24f8a7407aac1a0a09806b1521b0e4