Skip to content
Snippets Groups Projects
Commit ff146962 authored by Florian Mayer's avatar Florian Mayer
Browse files

Grant traced_probes search on directories.

This is needed to be able to scan the labels we have
permission on.

Denial:

04-06 12:52:22.674   874   874 W traced_probes: type=1400 audit(0.0:10314): avc: denied { search } for name="backup" dev="sda45" ino=6422529 scontext=u:r:traced_probes:s0 tcontext=u:object_r:backup_data_file:s0 tclass=dir permissive=0

Bug: 73625480
parent 04529dc6
No related branches found
No related tags found
No related merge requests found
...@@ -37,17 +37,17 @@ allow traced_probes system_file:dir { open read }; ...@@ -37,17 +37,17 @@ allow traced_probes system_file:dir { open read };
# Allow traced_probes to list some of the data partition. # Allow traced_probes to list some of the data partition.
allow traced_probes self:capability dac_read_search; allow traced_probes self:capability dac_read_search;
allow traced_probes apk_data_file:dir { getattr open read }; allow traced_probes apk_data_file:dir { getattr open read search };
allow traced_probes dalvikcache_data_file:dir { getattr open read }; allow traced_probes dalvikcache_data_file:dir { getattr open read search };
userdebug_or_eng(` userdebug_or_eng(`
allow traced_probes system_data_file:dir { getattr open read }; allow traced_probes system_data_file:dir { getattr open read search };
') ')
allow traced_probes system_app_data_file:dir { getattr open read }; allow traced_probes system_app_data_file:dir { getattr open read search };
allow traced_probes backup_data_file:dir { getattr open read }; allow traced_probes backup_data_file:dir { getattr open read search };
allow traced_probes bootstat_data_file:dir { getattr open read }; allow traced_probes bootstat_data_file:dir { getattr open read search };
allow traced_probes update_engine_data_file:dir { getattr open read }; allow traced_probes update_engine_data_file:dir { getattr open read search };
allow traced_probes update_engine_log_data_file:dir { getattr open read }; allow traced_probes update_engine_log_data_file:dir { getattr open read search };
allow traced_probes user_profile_data_file:dir { getattr open read }; allow traced_probes user_profile_data_file:dir { getattr open read search };
# Allow traced_probes to run atrace. atrace pokes at system services to enable # Allow traced_probes to run atrace. atrace pokes at system services to enable
# their userspace TRACE macros. # their userspace TRACE macros.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment