tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private/bug_map

34 lines
1.4 KiB
Text
Raw Normal View History

Update bug_map to explicitly have the b/ prefix This is part of a series of updates to bug_map across all of android tree. Bug: 141014771 Test: Generated a denial, verified that the bug id in the dmesg logs remains unchanged. Change-Id: I852e8ac38a162cc074232f15d919212548d485bf
2019-09-18 23:15:30 +02:00
dnsmasq netd fifo_file b/77868789
dnsmasq netd unix_stream_socket b/77868789
gmscore_app: suppress denials for system_data_file This denial is generally a sign that apps are attempting to access encrypted storage before the ACTION_USER_UNLOCKED intent is delivered. Suppress this denial to prevent logspam. While gmscore_app is running in permissive mode, there might be other denials for related actions (that won't show up in enforcing mode after the first action is denied). This change adds a bug_map entry to track those denials and prevent presubmit flakes. Bug: 142672293 Test: Happy builds Change-Id: Id2f8f8ff5cde40e74be24daa0b1100b91a7a4dbb
2019-12-12 23:05:49 +01:00
gmscore_app system_data_file dir b/146166941
Track denials from gmscore_app to read_policy avc: denied { read_policy } for comm="IntentService[D" scontext=u:r:gmscore_app:s0:c512,c768 tcontext=u:object_r:kernel:s0 tclass=security permissive=0 app=com.google.android.gms Bug: 303319090 Test: presubmit Change-Id: I99f328e1a8e116120d4915ed5dc55c305c6ca77f
2023-10-04 04:56:54 +02:00
gmscore_app kernel security b/303319090
Update bug_map to explicitly have the b/ prefix This is part of a series of updates to bug_map across all of android tree. Bug: 141014771 Test: Generated a denial, verified that the bug id in the dmesg logs remains unchanged. Change-Id: I852e8ac38a162cc074232f15d919212548d485bf
2019-09-18 23:15:30 +02:00
init app_data_file file b/77873135
init cache_file blk_file b/77873135
init logpersist file b/77873135
init nativetest_data_file dir b/77873135
init pstorefs dir b/77873135
init shell_data_file dir b/77873135
init shell_data_file file b/77873135
init shell_data_file lnk_file b/77873135
init shell_data_file sock_file b/77873135
init system_data_file chr_file b/77873135
isolated_app privapp_data_file dir b/119596573
isolated_app app_data_file dir b/120394782
mediaextractor app_data_file file b/77923736
mediaextractor radio_data_file file b/77923736
mediaprovider cache_file blk_file b/77925342
mediaprovider mnt_media_rw_file dir b/77925342
mediaprovider shell_data_file dir b/77925342
bug_map: track mediaswcodec ashmem denial Bug: 142679232 Test: n/a Change-Id: Ie6a8e65ad175e2c2ab444381d3b05d0191cc0302
2019-10-15 18:57:51 +02:00
mediaswcodec ashmem_device chr_file b/142679232
bug_map selinux test failure Bug:308043377 Change-Id: Idca147ac558d68d09d69844fdb382d0ad90d0261
2023-11-02 10:39:44 +01:00
platform_app device_config_media_native_prop file b/308043377
Update bug_map to explicitly have the b/ prefix This is part of a series of updates to bug_map across all of android tree. Bug: 141014771 Test: Generated a denial, verified that the bug id in the dmesg logs remains unchanged. Change-Id: I852e8ac38a162cc074232f15d919212548d485bf
2019-09-18 23:15:30 +02:00
platform_app nfc_data_file dir b/74331887
Track access from platform_app to system_data_file avc: denied { search } for comm="ll.splashworker" name="10" dev="dm-69" ino=4225 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:system_data_file:s0:c522,c768 tclass=dir permissive=0 app=com.android.systemui Test: boot and check logs Bug: 306090533 Bug: 303581276 Change-Id: I9a3ebe68e471a36a601054c7130c474aed8bb183
2023-10-18 08:32:51 +02:00
platform_app system_data_file dir b/306090533
overlayfs: deflake presubmit tests Bug: 142390309 Test: build Change-Id: Ibf12d5acba39436cf79b7eb3a1fbadb2296b68c4
2019-10-14 11:20:50 +02:00
system_server overlayfs_file file b/142390309
Update bug_map to explicitly have the b/ prefix This is part of a series of updates to bug_map across all of android tree. Bug: 141014771 Test: Generated a denial, verified that the bug id in the dmesg logs remains unchanged. Change-Id: I852e8ac38a162cc074232f15d919212548d485bf
2019-09-18 23:15:30 +02:00
system_server sdcardfs file b/77856826
Track sys_module permission for system_server 04-02 11:47:07.529 1827 1827 I auditd : type=1400 audit(0.0:4): avc: denied { sys_module } for comm="system_server" capability=16 scontext=u:r:system_server:s0 tcontext=u:r:system_server:s0 tclass=capability permissive=0 Bug: 228030183 Test: boot, check that auditd parses bug_map correctly Change-Id: I6861a864a28577fc7841f5591fb7e1f3879a40d4
2022-04-13 02:32:35 +02:00
system_server system_server capability b/228030183
Update bug_map to explicitly have the b/ prefix This is part of a series of updates to bug_map across all of android tree. Bug: 141014771 Test: Generated a denial, verified that the bug id in the dmesg logs remains unchanged. Change-Id: I852e8ac38a162cc074232f15d919212548d485bf
2019-09-18 23:15:30 +02:00
system_server zygote process b/77856826
Track tombstone_transmit denial Bug: 264420112 Test: N/A Change-Id: I5caec836d540b8686ed1d8b6ceb537038db866d8
2023-02-23 16:32:55 +01:00
tombstone_transmit tombstone_transmit capability b/264420112
Gboard: Whitelist test failure This is intended to be temporary workaround until the Gboard developers fix their app. Addresses avc: denied { bind } for comm="ThreadPoolForeg" scontext=u:r:untrusted_app:s0:c166,c256,c512,c768 tcontext=u:r:untrusted_app:s0:c166,c256,c512,c768 tclass=netlink_route_socket permissive= app=com.google.android.inputmethod.latin Bug: 155595000 Test: build Change-Id: I432ac1462329efb4bc118c3967a099833e6eb813
2020-05-04 10:21:40 +02:00
untrusted_app untrusted_app netlink_route_socket b/155595000
Update bug_map to explicitly have the b/ prefix This is part of a series of updates to bug_map across all of android tree. Bug: 141014771 Test: Generated a denial, verified that the bug id in the dmesg logs remains unchanged. Change-Id: I852e8ac38a162cc074232f15d919212548d485bf
2019-09-18 23:15:30 +02:00
vold system_data_file file b/124108085
zygote untrusted_app_25 process b/77925912
bug_map selinux test failure Bug:308043377 Change-Id: Idca147ac558d68d09d69844fdb382d0ad90d0261
2023-11-02 10:39:44 +01:00
zygote labeledfs filesystem b/170748799
Reference in a new issue Copy permalink