Skip to content
Snippets Groups Projects
Commit fde0e02a authored by Josh Gao's avatar Josh Gao
Browse files

crash_dump_fallback: allow writing to system_server pipes.

Allow mediacodec/mediaextractor to write to system_server pipes during
ANR dumps.

Addresses the following denials:
avc: denied { write } for comm="mediaextractor" path="pipe:[1177610]" dev="pipefs" ino=1177610 scontext=u:r:mediaextractor:s0 tcontext=u:r:system_server:s0 tclass=fifo_file permissive=0
avc: denied { write } for comm="omx@1.0-service" path="pipe:[1175808]" dev="pipefs" ino=1175808 scontext=u:r:mediacodec:s0 tcontext=u:r:system_server:s0 tclass=fifo_file permissive=0

Bug: http://b/63801592
Test: treehugger
Change-Id: I944b1fa76c70402607ccd903be17dbddeaa73201
(cherry picked from commit 3c9b9197)
parent f2230155
No related branches found
No related tags found
No related merge requests found
...@@ -474,8 +474,9 @@ userdebug_or_eng(` ...@@ -474,8 +474,9 @@ userdebug_or_eng(`
') ')
allow $1 anr_data_file:file append; allow $1 anr_data_file:file append;
allow $1 dumpstate:fd use; allow $1 dumpstate:fd use;
# TODO: Figure out why write is needed and remove. # TODO: Figure out why write is needed.
allow $1 dumpstate:fifo_file { append write }; allow $1 dumpstate:fifo_file { append write };
allow $1 system_server:fifo_file { append write };
allow $1 tombstoned:unix_stream_socket connectto; allow $1 tombstoned:unix_stream_socket connectto;
allow $1 tombstoned:fd use; allow $1 tombstoned:fd use;
allow $1 tombstoned_crash_socket:sock_file write; allow $1 tombstoned_crash_socket:sock_file write;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment