Skip to content
Snippets Groups Projects
  • felkachang's avatar
    Track isolated_app SELinux denial. · 196b12eb
    felkachang authored
    The isolated service that do nothing for AIDL's APIs still got the
    SELinux denied. This should fix presubmit test.
    
    01-01 00:00:22.103  5831  5831 I auditd  : type=1400 audit(0.0:6): avc:
    denied { getattr } for comm="convert.service"
    path="/data/data/com.android.providers.media" dev="sda35" ino=1442136
    scontext=u:r:isolated_app:s0:c0,c256,c512,c768
    tcontext=u:object_r:privapp_data_file:s0:c512,c768 tclass=dir
    permissive=0
    
    Test: build
    Bug: 119596573
    
    Change-Id: Ie58326ba217ed6ca56ca9933c6664896ac3d327a
    196b12eb