Skip to content
Snippets Groups Projects
  • Nick Kralevich's avatar
    79a08e13
    Get rid of auditallow spam. · 79a08e13
    Nick Kralevich authored
    Fixes the following SELinux messages when running adb bugreport:
    
    avc: granted { read } for name="libart.so" dev="dm-0" ino=1886
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0 tclass=file
    
    avc: granted { read open } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { getattr } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read execute } for path="/system/lib64/libart.so"
    dev="dm-0" ino=1886 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:libart_file:s0 tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { search } for name="dalvik-cache" dev="dm-2" ino=106289
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { getattr } for path="/data/dalvik-cache/arm64" dev="dm-2"
    ino=106290 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=dir
    
    avc: granted { search } for name="dalvik-cache" dev="dm-2" ino=106289
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { search } for name="arm64" dev="dm-2" ino=106290
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { getattr } for
    path="/data/dalvik-cache/arm64/system@framework@boot.art" dev="dm-2"
    ino=106318 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=file
    
    avc: granted { search } for name="dalvik-cache" dev="dm-2" ino=106289
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { search } for name="arm64" dev="dm-2" ino=106290
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { read } for name="system@framework@boot.art" dev="dm-2"
    ino=106318 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=file
    
    avc: granted { read open } for
    path="/data/dalvik-cache/arm64/system@framework@boot.art" dev="dm-2"
    ino=106318 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=file
    
    avc: granted { search } for name="dalvik-cache" dev="dm-2" ino=106289
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    [  169.349480] type=1400 audit(1477679159.734:129): avc: granted { read
    } for pid=6413 comm="main" name="ipv6_route" dev="proc" ino=4026535947
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.350030] type=1400 audit(1477679159.734:130): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/ipv6_route"
    dev="proc" ino=4026535947 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.350361] type=1400 audit(1477679159.734:130): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/ipv6_route"
    dev="proc" ino=4026535947 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.350399] type=1400 audit(1477679159.734:131): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/ipv6_route"
    dev="proc" ino=4026535947 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.350963] type=1400 audit(1477679159.734:131): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/ipv6_route"
    dev="proc" ino=4026535947 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351002] type=1400 audit(1477679159.734:132): avc: granted { read
    } for pid=6413 comm="main" name="if_inet6" dev="proc" ino=4026535946
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351330] type=1400 audit(1477679159.734:132): avc: granted { read
    } for pid=6413 comm="main" name="if_inet6" dev="proc" ino=4026535946
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351366] type=1400 audit(1477679159.734:133): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351861] type=1400 audit(1477679159.734:133): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351910] type=1400 audit(1477679159.734:134): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.353105] type=1400 audit(1477679159.734:134): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.353186] type=1400 audit(1477679159.734:135): avc: granted { read
    } for pid=6413 comm="main" name="if_inet6" dev="proc" ino=4026535946
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.353594] type=1400 audit(1477679159.734:135): avc: granted { read
    } for pid=6413 comm="main" name="if_inet6" dev="proc" ino=4026535946
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.353636] type=1400 audit(1477679159.734:136): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.354230] type=1400 audit(1477679159.734:136): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.354437] type=1400 audit(1477679159.734:137): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.395359] type=1400 audit(1477679159.734:137): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    Test: policy compiles
    Test: adb bugreport runs without auditallow messages above.
    Bug: 32246161
    Change-Id: Ie0ab2ed3c6babc1f93d3b8ae47c92dd905ebc93a
    79a08e13
    History
    Get rid of auditallow spam.
    Nick Kralevich authored
    Fixes the following SELinux messages when running adb bugreport:
    
    avc: granted { read } for name="libart.so" dev="dm-0" ino=1886
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0 tclass=file
    
    avc: granted { read open } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { getattr } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read execute } for path="/system/lib64/libart.so"
    dev="dm-0" ino=1886 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:libart_file:s0 tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { read } for path="/system/lib64/libart.so" dev="dm-0"
    ino=1886 scontext=u:r:dumpstate:s0 tcontext=u:object_r:libart_file:s0
    tclass=file
    
    avc: granted { search } for name="dalvik-cache" dev="dm-2" ino=106289
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { getattr } for path="/data/dalvik-cache/arm64" dev="dm-2"
    ino=106290 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=dir
    
    avc: granted { search } for name="dalvik-cache" dev="dm-2" ino=106289
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { search } for name="arm64" dev="dm-2" ino=106290
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { getattr } for
    path="/data/dalvik-cache/arm64/system@framework@boot.art" dev="dm-2"
    ino=106318 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=file
    
    avc: granted { search } for name="dalvik-cache" dev="dm-2" ino=106289
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { search } for name="arm64" dev="dm-2" ino=106290
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    avc: granted { read } for name="system@framework@boot.art" dev="dm-2"
    ino=106318 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=file
    
    avc: granted { read open } for
    path="/data/dalvik-cache/arm64/system@framework@boot.art" dev="dm-2"
    ino=106318 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:dalvikcache_data_file:s0 tclass=file
    
    avc: granted { search } for name="dalvik-cache" dev="dm-2" ino=106289
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:dalvikcache_data_file:s0
    tclass=dir
    
    [  169.349480] type=1400 audit(1477679159.734:129): avc: granted { read
    } for pid=6413 comm="main" name="ipv6_route" dev="proc" ino=4026535947
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.350030] type=1400 audit(1477679159.734:130): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/ipv6_route"
    dev="proc" ino=4026535947 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.350361] type=1400 audit(1477679159.734:130): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/ipv6_route"
    dev="proc" ino=4026535947 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.350399] type=1400 audit(1477679159.734:131): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/ipv6_route"
    dev="proc" ino=4026535947 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.350963] type=1400 audit(1477679159.734:131): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/ipv6_route"
    dev="proc" ino=4026535947 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351002] type=1400 audit(1477679159.734:132): avc: granted { read
    } for pid=6413 comm="main" name="if_inet6" dev="proc" ino=4026535946
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351330] type=1400 audit(1477679159.734:132): avc: granted { read
    } for pid=6413 comm="main" name="if_inet6" dev="proc" ino=4026535946
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351366] type=1400 audit(1477679159.734:133): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351861] type=1400 audit(1477679159.734:133): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.351910] type=1400 audit(1477679159.734:134): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.353105] type=1400 audit(1477679159.734:134): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.353186] type=1400 audit(1477679159.734:135): avc: granted { read
    } for pid=6413 comm="main" name="if_inet6" dev="proc" ino=4026535946
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.353594] type=1400 audit(1477679159.734:135): avc: granted { read
    } for pid=6413 comm="main" name="if_inet6" dev="proc" ino=4026535946
    scontext=u:r:dumpstate:s0 tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.353636] type=1400 audit(1477679159.734:136): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.354230] type=1400 audit(1477679159.734:136): avc: granted { read
    open } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.354437] type=1400 audit(1477679159.734:137): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    [  169.395359] type=1400 audit(1477679159.734:137): avc: granted {
    getattr } for pid=6413 comm="main" path="/proc/6413/net/if_inet6"
    dev="proc" ino=4026535946 scontext=u:r:dumpstate:s0
    tcontext=u:object_r:proc_net:s0 tclass=file
    
    Test: policy compiles
    Test: adb bugreport runs without auditallow messages above.
    Bug: 32246161
    Change-Id: Ie0ab2ed3c6babc1f93d3b8ae47c92dd905ebc93a