Skip to content
Snippets Groups Projects
  • Robert Craig's avatar
    fc4c6b79
    Allow all appdomains to grab file attributes of wallpaper_file. · fc4c6b79
    Robert Craig authored
    
    When setting a static wallpaper on multiple devices the
    following denials were encountered.
       avc:  denied  { getattr } for  pid=1775 comm="llpaper_chooser" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:shared_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
       avc:  denied  { getattr } for  pid=799 comm="ndroid.systemui" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:platform_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
       avc:  denied  { getattr } for  pid=1909 comm=4173796E635461736B202332 path="/data/system/users/0/wallpaper" dev="mmcblk0p28" ino=586422 scontext=u:r:release_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
    
    platform_app access is from the SystemUI app whereas the other
    denials are from the Launcher that is used on the particular
    device. For instance, Launcher2 triggers the shared_app denial
    whereas release_app (used by Launcher3) triggers the other denial.
    Because of this, add the rule to all appdomains.
    
    The static wallpaper is still set without this change. Just add
    the rule to avoid the noise in the logs.
    
    Change-Id: Ida84d1695d52379d67b87318403f629fd07109a4
    Signed-off-by: default avatarrpcraig <rpcraig@tycho.ncsc.mil>
    fc4c6b79
    History
    Allow all appdomains to grab file attributes of wallpaper_file.
    Robert Craig authored
    
    When setting a static wallpaper on multiple devices the
    following denials were encountered.
       avc:  denied  { getattr } for  pid=1775 comm="llpaper_chooser" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:shared_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
       avc:  denied  { getattr } for  pid=799 comm="ndroid.systemui" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:platform_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
       avc:  denied  { getattr } for  pid=1909 comm=4173796E635461736B202332 path="/data/system/users/0/wallpaper" dev="mmcblk0p28" ino=586422 scontext=u:r:release_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
    
    platform_app access is from the SystemUI app whereas the other
    denials are from the Launcher that is used on the particular
    device. For instance, Launcher2 triggers the shared_app denial
    whereas release_app (used by Launcher3) triggers the other denial.
    Because of this, add the rule to all appdomains.
    
    The static wallpaper is still set without this change. Just add
    the rule to avoid the noise in the logs.
    
    Change-Id: Ida84d1695d52379d67b87318403f629fd07109a4
    Signed-off-by: default avatarrpcraig <rpcraig@tycho.ncsc.mil>