From 4c27d7a1103fa2e38fe9a585667ce8f74313e284 Mon Sep 17 00:00:00 2001
From: Josh Gao <jmgao@google.com>
Date: Mon, 23 Jan 2017 10:21:11 -0800
Subject: [PATCH] tombstoned: temporarily allow write to anr_data_file.
auditallow this until we track down where the file is opened without
O_APPEND.
01-23 08:02:12.272 555 555 W tombstoned: type=1400 audit(0.0:11480): avc: denied { write } for path="/data/anr/traces.txt" dev="sda35" ino=4669445 scontext=u:r:tombstoned:s0 tcontext=u:object_r:anr_data_file:s0 tclass=file permissive=0
Bug: http://b/34193533
Test: mma
Change-Id: I77b854dce06231232004432839ebd5aa963ef035
---
public/tombstoned.te | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/public/tombstoned.te b/public/tombstoned.te
index 840c026c6..37243bb66 100644
--- a/public/tombstoned.te
+++ b/public/tombstoned.te
@@ -11,3 +11,7 @@ allow tombstoned domain:file r_file_perms;
allow tombstoned tombstone_data_file:dir rw_dir_perms;
allow tombstoned tombstone_data_file:file create_file_perms;
allow tombstoned anr_data_file:file { getattr append };
+
+# TODO: Find out why this is happening.
+allow tombstoned anr_data_file:file write;
+auditallow tombstoned anr_data_file:file write;
--
GitLab