Add the sepolicy rules for adsprpcd
Fix the avc error of adsprpcd.
avc: denied { ioctl } for path="/dev/ion" dev="tmpfs" ino=27099 ioctlcmd=0x4901 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:ion_device:s0 tclass=chr_file permissive=1
avc: denied { open } for path="/dev/ion" dev="tmpfs" ino=27099 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:ion_device:s0 tclass=chr_file permissive=1
avc: denied { read } for name="ion" dev="tmpfs" ino=27099 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:ion_device:s0 tclass=chr_file permissive=1
avc: denied { search } for name="vendor" dev="tmpfs" ino=26788 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=1
avc: denied { search } for name="/" dev="sda2" ino=2 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:persist_file:s0 tclass=dir permissive=1
avc: denied { ioctl } for path="/dev/adsprpc-smd-secure" dev="tmpfs" ino=27650 ioctlcmd=0x5201 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:qdsp_device:s0 tclass=chr_file permissive=1
avc: denied { open } for path="/dev/adsprpc-smd-secure" dev="tmpfs" ino=27650 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:qdsp_device:s0 tclass=chr_file permissive=1
avc: denied { read } for name="adsprpc-smd-secure" dev="tmpfs" ino=27650 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:qdsp_device:s0 tclass=chr_file permissive=1
avc: denied { add_name } for name="sns_amd" dev="sda2" ino=270 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=dir permissive=1
avc: denied { getattr } for path="/mnt/vendor/persist/sensors/registry/registry" dev="sda2" ino=74 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=dir permissive=1
avc: denied { open } for path="/mnt/vendor/persist/sensors/registry/registry" dev="sda2" ino=74 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=dir permissive=1
avc: denied { read } for name="registry" dev="sda2" ino=74 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=dir permissive=1
avc: denied { remove_name } for name="temp.json" dev="sda2" ino=376 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=dir permissive=1
avc: denied { search } for name="sensors" dev="sda2" ino=16 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=dir permissive=1
avc: denied { write } for name="registry" dev="sda2" ino=17 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=dir permissive=1
avc: denied { create } for name="temp.json" scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=file permissive=1
avc: denied { getattr } for path="/mnt/vendor/persist/sensors/registry/registry/lsm6dsr_0_platform.act" dev="sda2" ino=317 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=file permissive=1
avc: denied { open } for path="/mnt/vendor/persist/sensors/registry/registry/lsm6dsr_0_platform.act" dev="sda2" ino=317 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=file permissive=1
avc: denied { read } for name="lsm6dsr_0_platform.act" dev="sda2" ino=317 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=file permissive=1
avc: denied { rename } for name="temp.json" dev="sda2" ino=376 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=file permissive=1
avc: denied { unlink } for name="sns_amd" dev="sda2" ino=270 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=file permissive=1
avc: denied { write } for path="/mnt/vendor/persist/sensors/registry/temp.json" dev="sda2" ino=376 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sensors_persist_file:s0 tclass=file permissive=1
avc: denied { search } for name="backlight" dev="sysfs" ino=65708 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sysfs_leds:s0 tclass=dir permissive=1
avc: denied { getattr } for path="/sys/devices/platform/soc/soc:qcom,dsi-display-primary/backlight/panel0-backlight/brightness" dev="sysfs" ino=65715 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sysfs_leds:s0 tclass=file permissive=1
avc: denied { open } for path="/sys/devices/platform/soc/soc:qcom,dsi-display-primary/backlight/panel0-backlight/brightness" dev="sysfs" ino=65715 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sysfs_leds:s0 tclass=file permissive=1
avc: denied { read } for name="brightness" dev="sysfs" ino=65715 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sysfs_leds:s0 tclass=file permissive=1
avc: denied { search } for name="soc0" dev="sysfs" ino=69684 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sysfs_soc:s0 tclass=dir permissive=1
avc: denied { getattr } for path="/sys/devices/soc0/hw_platform" dev="sysfs" ino=69725 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sysfs_soc:s0 tclass=file permissive=1
avc: denied { open } for path="/sys/devices/soc0/hw_platform" dev="sysfs" ino=69725 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sysfs_soc:s0 tclass=file permissive=1
avc: denied { read } for name="hw_platform" dev="sysfs" ino=69725 scontext=u:r:adsprpcd:s0 tcontext=u:object_r:sysfs_soc:s0 tclass=file permissive=1
Bug: 141525374
Test: flash selinux modules to device and find avc errors gone
Change-Id: I5e912f0067b61d7a6c103064a2ed0d383be27960
1 file changed
