Skip to content

Commit

Permalink
NLA: Sepolicy: Address gmscore_app denials
Browse files Browse the repository at this point in the history
03-29 15:56:21.007 13786 13786 I auditd  : type=1400 audit(0.0:345): avc: denied { getopt } for comm="FinalizerDaemon" path="/dev/socket/usap_pool_primary" scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 app=com.google.android.gms
03-29 15:56:21.007 13786 13786 W FinalizerDaemon: type=1400 audit(0.0:345): avc: denied { getopt } for path="/dev/socket/usap_pool_primary" scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 app=com.google.android.gms

Signed-off-by: iusmac <iusico.maxim@libero.it>
  • Loading branch information
iusmac authored and Niemandausduisburg committed Jul 28, 2023
1 parent 10830a9 commit 4939e59
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions sepolicy/vendor/gmscore_app.te
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
allow gmscore_app exported_camera_prop:file { read };

get_prop(gmscore_app, vendor_camera_prop)

allow gmscore_app zygote:unix_stream_socket { getopt };

0 comments on commit 4939e59

Please sign in to comment.