Skip to content
Snippets Groups Projects
  • Joel Galenson's avatar
    fc870ce9
    Allow some vold_prepare_subdirs denials. · fc870ce9
    Joel Galenson authored
    This addresses the following denials:
    
    avc: denied { fowner } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:r:vold_prepare_subdirs:s0 tclass=capability
    avc: denied { getattr } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:storaged_data_file:s0 tclass=file
    avc: denied { relabelfrom } for comm="vold_prepare_su" name="storaged" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:system_data_file:s0 tclass=dir
    avc: denied { getattr } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:system_data_file:s0 tclass=file
    
    Bug: 77875245
    Test: Boot device.
    Test: Mislabel directories used by vold_prepare_subdirs, reboot, and
    ensure it can relabel them without denials.
    Test: Add user, reboot, delete user, reboot, observe no denials.
    
    (cherry picked from commit 855dd5a8)
    
    Merged-In: Id67bc99f151a6ccb9619bbfb7080452956405121
    Change-Id: I2f6b5abfaf81570d03a30f2edf7296b5afd10c9b
    fc870ce9
    History
    Allow some vold_prepare_subdirs denials.
    Joel Galenson authored
    This addresses the following denials:
    
    avc: denied { fowner } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:r:vold_prepare_subdirs:s0 tclass=capability
    avc: denied { getattr } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:storaged_data_file:s0 tclass=file
    avc: denied { relabelfrom } for comm="vold_prepare_su" name="storaged" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:system_data_file:s0 tclass=dir
    avc: denied { getattr } for comm="rm" scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:object_r:system_data_file:s0 tclass=file
    
    Bug: 77875245
    Test: Boot device.
    Test: Mislabel directories used by vold_prepare_subdirs, reboot, and
    ensure it can relabel them without denials.
    Test: Add user, reboot, delete user, reboot, observe no denials.
    
    (cherry picked from commit 855dd5a8)
    
    Merged-In: Id67bc99f151a6ccb9619bbfb7080452956405121
    Change-Id: I2f6b5abfaf81570d03a30f2edf7296b5afd10c9b
vold_prepare_subdirs.te 1.11 KiB