Skip to content
Snippets Groups Projects
Commit 04e730b6 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

system_server: allow open /dev/snd and read files

system_server needs to open /dev/snd and access files
within that directory. Allow it.

system_server need to parse the ALSA card descriptors after a USB device
has been inserted. This happens from USBService in system_server.

Addresses the following denial:

  system_server( 1118): type=1400 audit(0.0:19): avc: denied { search } for comm=5573625365727669636520686F7374 name="snd" dev="tmpfs" ino=8574 scontext=u:r:system_server:s0 tcontext=u:object_r:audio_device:s0 tclass=dir

and likely others

Change-Id: Id274d3feb7bf337f492932e5e664d65d0b8d05b8
parent bac4ccce
No related branches found
No related tags found
No related merge requests found
...@@ -163,6 +163,8 @@ allow system_server usbaccessory_device:chr_file rw_file_perms; ...@@ -163,6 +163,8 @@ allow system_server usbaccessory_device:chr_file rw_file_perms;
allow system_server video_device:dir r_dir_perms; allow system_server video_device:dir r_dir_perms;
allow system_server video_device:chr_file rw_file_perms; allow system_server video_device:chr_file rw_file_perms;
allow system_server adbd_socket:sock_file rw_file_perms; allow system_server adbd_socket:sock_file rw_file_perms;
allow system_server audio_device:dir r_dir_perms;
allow system_server audio_device:chr_file r_file_perms;
# tun device used for 3rd party vpn apps # tun device used for 3rd party vpn apps
allow system_server tun_device:chr_file rw_file_perms; allow system_server tun_device:chr_file rw_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment