Skip to content
Snippets Groups Projects
Commit aa5f37da authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by Jeffrey Vander Stoep
Browse files

do not expand hal_cas attribute

Addresses:
junit.framework.AssertionFailedError: The following errors were
encountered when validating the SELinuxneverallow rule:
neverallow {   domain   -adbd   -dumpstate   -hal_drm -hal_cas -init
-mediadrmserver   -recovery   -shell   -system_server }
serialno_prop:file { getattr open read ioctl lock map };
Warning!  Type or attribute hal_cas used in neverallow undefined in
policy being checked.
libsepol.report_failure: neverallow violated by allow mediaextractor
serialno_prop:file { ioctl read getattr lock map open };
libsepol.report_failure: neverallow violated by allow mediacodec
serialno_prop:file { ioctl read getattr lock map open };
libsepol.report_failure: neverallow violated by allow hal_cas_default
serialno_prop:file { ioctl read getattr lock map open };
libsepol.check_assertions: 3 neverallow failures occurred

Bug: 65681219
Test: build
Change-Id: I2a6445d6372ee4e768cc2cea2140c6de97707a74
Merged-In: I1092aff40da9dcf09bd044400bedd1f549eb7e38
parent 123cf237
No related branches found
No related tags found
No related merge requests found
...@@ -245,7 +245,7 @@ expandattribute hal_drm_client true; ...@@ -245,7 +245,7 @@ expandattribute hal_drm_client true;
attribute hal_drm_server; attribute hal_drm_server;
expandattribute hal_drm_server true; expandattribute hal_drm_server true;
attribute hal_cas; attribute hal_cas;
expandattribute hal_cas true; expandattribute hal_cas false;
attribute hal_cas_client; attribute hal_cas_client;
expandattribute hal_cas_client true; expandattribute hal_cas_client true;
attribute hal_cas_server; attribute hal_cas_server;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment