Add selinux policy for GNSS hal
The following are the avc denials that are addressed:
avc: denied { create } for pid=2059 comm="Loc_hal_worker"
scontext=u:r:hal_gnss_default:s0 tcontext=u:r:hal_gnss_default:s0
tclass=netlink_socket permissive=0
avc: denied { create } for pid=2059 comm="Loc_hal_worker"
scontext=u:r:hal_gnss_default:s0 tcontext=u:r:hal_gnss_default:s0
tclass=socket permissive=0
avc: denied { search } for pid=2059 comm="Loc_hal_worker"
name="msm_subsys" dev="sysfs" ino=4093 scontext=u:r:hal_gnss_default:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir permissive=0
avc: denied { ioctl } for path="socket:[27085]" dev="sockfs" ino=27085
ioctlcmd=c304 scontext=u:r:hal_gnss_default:s0
tcontext=u:r:hal_gnss_default:s0 tclass=socket permissive=0
avc: denied { ioctl } for pid=2139 comm="Loc_hal_worker"
path="socket:[27564]" dev="sockfs" ino=27564 ioctlcmd=c302
scontext=u:r:hal_gnss_default:s0 tcontext=u:r:hal_gnss_default:s0
tclass=socket permissive=0
avc: denied { read } for name="devices" dev="sysfs" ino=4095
scontext=u:r:hal_gnss_default:s0 tcontext=u:object_r:sysfs_msm_subsys:s0
tclass=dir permissive=0
avc: denied { bind } for pid=2139 comm="Loc_hal_worker"
scontext=u:r:hal_gnss_default:s0 tcontext=u:r:hal_gnss_default:s0
tclass=netlink_socket permissive=0
avc: denied { read } for pid=2139 comm="Loc_hal_worker" name="subsys0"
dev="sysfs" ino=13126 scontext=u:r:hal_gnss_default:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=lnk_file permissive=0
avc: denied { open } for path="/sys/bus/msm_subsys/devices" dev="sysfs"
ino=4095 scontext=u:r:hal_gnss_default:s0
tcontext=u:object_r:sysfs_msm_subsys:s0 tclass=dir permissive=0
avc: denied { bind } for scontext=u:r:hal_gnss_default:s0
tcontext=u:r:hal_gnss_default:s0 tclass=netlink_socket permissive=0
avc: denied { write } for scontext=u:r:hal_gnss_default:s0
tcontext=u:r:hal_gnss_default:s0 tclass=socket permissive=0
avc: denied { read } for scontext=u:r:hal_gnss_default:s0
tcontext=u:r:hal_gnss_default:s0 tclass=netlink_socket permissive=0
avc: denied { read } for name="soc_id" dev="sysfs" ino=22069
scontext=u:r:hal_gnss_default:s0 tcontext=u:object_r:sysfs:s0
tclass=file permissive=0
avc: denied { open } for path="/sys/devices/soc0/hw_platform"
dev="sysfs" ino=22091 scontext=u:r:hal_gnss_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
avc: denied { getattr } for path="/sys/devices/soc0/hw_platform"
dev="sysfs" ino=22091 scontext=u:r:hal_gnss_default:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
avc: denied { getattr } for path="/sys/devices/soc0/soc_id" dev="sysfs"
ino=22069 scontext=u:r:hal_gnss_default:s0 tcontext=u:object_r:sysfs:s0
tclass=file permissive=0
Bug:31974439
Test: Checked that there no more related avc denial messages related to
the GNSS HAL in dmesg.
Change-Id: Ia36515a3c5d8f1a24567aa53790f7cadbf17e9fc
1 file changed
