Skip to content
Snippets Groups Projects
Commit f617a404 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

auditallow shell input_device:chr_file

Test to see if anyone is writing to /dev/input from the shell.

Bug: 30861057
Test: device boots and no avc granted messages.
Change-Id: Ia3499ef9436f83cf13c633525348b63edd95990f
parent 7ecc8b13
No related branches found
No related tags found
No related merge requests found
......@@ -45,8 +45,14 @@ unix_socket_connect(shell, dumpstate, dumpstate)
allow shell devpts:chr_file rw_file_perms;
allow shell tty_device:chr_file rw_file_perms;
allow shell console_device:chr_file rw_file_perms;
allow shell input_device:dir r_dir_perms;
allow shell input_device:chr_file rw_file_perms;
# b/30861057: TODO: No shell write access to existing input devices
userdebug_or_eng(`
auditallow shell input_device:chr_file write;
')
r_dir_file(shell, system_file)
allow shell system_file:file x_file_perms;
allow shell toolbox_exec:file rx_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment