tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private/bug_map

37 lines
1.4 KiB
Text
Raw Normal View History

Track cppreopts SELinux denial. This should help fix presubmit tests. Bug: 79414024 Test: Built policy. Change-Id: Ic840150767ff6c2799ac3b5ef22ba139108c94dd
2018-05-08 17:43:07 +02:00
cppreopts cppreopts capability 79414024
Add bug_map entries for bugs we've seen. This adds numerous bug_map entries to try to annotate all denials we've seen. Bug: 78117980 Test: Build Change-Id: I1da0690e0b4b0a44d673a54123a0b49a0d115a49
2018-04-16 19:31:38 +02:00
dnsmasq netd fifo_file 77868789
dnsmasq netd unix_stream_socket 77868789
init app_data_file file 77873135
init cache_file blk_file 77873135
init logpersist file 77873135
init nativetest_data_file dir 77873135
init pstorefs dir 77873135
init shell_data_file dir 77873135
init shell_data_file file 77873135
init shell_data_file lnk_file 77873135
init shell_data_file sock_file 77873135
init system_data_file chr_file 77873135
Track isolated_app SELinux denial. The isolated service that do nothing for AIDL's APIs still got the SELinux denied. This should fix presubmit test. 01-01 00:00:22.103 5831 5831 I auditd : type=1400 audit(0.0:6): avc: denied { getattr } for comm="convert.service" path="/data/data/com.android.providers.media" dev="sda35" ino=1442136 scontext=u:r:isolated_app:s0:c0,c256,c512,c768 tcontext=u:object_r:privapp_data_file:s0:c512,c768 tclass=dir permissive=0 Test: build Bug: 119596573 Change-Id: Ie58326ba217ed6ca56ca9933c6664896ac3d327a
2018-11-27 22:06:46 +01:00
isolated_app privapp_data_file dir 119596573
Track isolated_app app_data_file SELinux denial. The isolated service that do nothing except for both AIDL's basic skeleton and service binding. It still got the SELinux denied. This should fix presubmit test. 01-01 00:00:29.196 6121 6121 I auditd : type=1400 audit(0.0:6): avc: denied { getattr } for comm="convert.service" path="/data/data/com.android.externalstorage" dev="sda35" ino=655437 scontext=u:r:isolated_app:s0:c0,c256,c512,c768 tcontext=u:object_r:app_data_file:s0:c512,c768 tclass=dir permissive=0 Test: ag/5681059 ag/5660144 Bug: 120394782 Change-Id: I7838def96da30b88d510dab860ed9779a0d4d5ed
2018-12-03 21:14:15 +01:00
isolated_app app_data_file dir 120394782
Add bug_map entries for bugs we've seen. This adds numerous bug_map entries to try to annotate all denials we've seen. Bug: 78117980 Test: Build Change-Id: I1da0690e0b4b0a44d673a54123a0b49a0d115a49
2018-04-16 19:31:38 +02:00
mediaextractor app_data_file file 77923736
mediaextractor radio_data_file file 77923736
mediaprovider cache_file blk_file 77925342
mediaprovider mnt_media_rw_file dir 77925342
mediaprovider shell_data_file dir 77925342
netd priv_app unix_stream_socket 77870037
netd untrusted_app unix_stream_socket 77870037
netd untrusted_app_25 unix_stream_socket 77870037
netd untrusted_app_27 unix_stream_socket 77870037
Track platform_app SELinux denial. This should fix presubmit tests. Bug: 74331887 Test: Built policy. Change-Id: Ie9ef75a7f9eaebf1103e3d2f3b4521e9abaf2fe7 (cherry picked from commit 2995e996b99a18246a184041ce6ccc2d0ab52131)
2018-03-07 17:26:08 +01:00
platform_app nfc_data_file dir 74331887
Whitelist flaky presubmit failures These denials already have tracking bugs. Addresses avc: denied { write } for comm=".gms.persistent" name="0" dev="tmpfs" scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:mnt_user_file:s0 tclass=dir permissive=0 app=com.google.android.gms avc: denied { getattr } for path="/data/system_ce/0/accounts_ce.db" scontext=u:r:vold:s0 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0 Bug: 124108085 Bug: 118185801 Test: build tests Change-Id: I97192e5c85d8d3a9efe950a0bbb33ea88aac76bd
2019-02-18 22:19:01 +01:00
priv_app mnt_user_file dir 118185801
Track system_server SELinux denial. This should fix presubmit tests. Bug: 73128755 Test: Built policy. Change-Id: Ie389de04360090594e627e629a59a60092dda6ca
2018-02-08 23:32:14 +01:00
system_server crash_dump process 73128755
Add bug_map entries for bugs we've seen. This adds numerous bug_map entries to try to annotate all denials we've seen. Bug: 78117980 Test: Build Change-Id: I1da0690e0b4b0a44d673a54123a0b49a0d115a49
2018-04-16 19:31:38 +02:00
system_server sdcardfs file 77856826
bug_map: track new pm/storage denials avc: denied { getattr } for comm="Binder:1231_1" path="/storage/emulated" dev="tmpfs" ino=72787 scontext=u:r:system_server:s0 tcontext=u:object_r:storage_stub_file:s0 tclass=dir Bug: 112609936 Test: Built policy. Change-Id: Ib772aca11bad4ba267de259be4ad065f228ef1df
2018-08-15 19:21:23 +02:00
system_server storage_stub_file dir 112609936
Add bug_map entries for bugs we've seen. This adds numerous bug_map entries to try to annotate all denials we've seen. Bug: 78117980 Test: Build Change-Id: I1da0690e0b4b0a44d673a54123a0b49a0d115a49
2018-04-16 19:31:38 +02:00
system_server zygote process 77856826
Track untrusted_app_27 SELinux denial vrcore is trying to access external storage before it is available. Bug: 118185801 Test: n/a Change-Id: Ieb38a1bfb977d9f6f642fecdd1000a195b2c8259
2019-02-14 22:13:16 +01:00
untrusted_app_27 mnt_user_file dir 118185801
Track usbd SELinux denial. This should fix presubmit tests. Bug: 72472544 Test: Built policy. Change-Id: I01f0fe3dc759db66005e26d15395893d494c4bb7
2018-01-26 23:08:06 +01:00
usbd usbd capability 72472544
Whitelist flaky presubmit failures These denials already have tracking bugs. Addresses avc: denied { write } for comm=".gms.persistent" name="0" dev="tmpfs" scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:mnt_user_file:s0 tclass=dir permissive=0 app=com.google.android.gms avc: denied { getattr } for path="/data/system_ce/0/accounts_ce.db" scontext=u:r:vold:s0 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0 Bug: 124108085 Bug: 118185801 Test: build tests Change-Id: I97192e5c85d8d3a9efe950a0bbb33ea88aac76bd
2019-02-18 22:19:01 +01:00
vold system_data_file file 124108085
Track vrcore_app SELinux denial Bug: 118185801 Test: bug no. appears in the denial logs Change-Id: Ib1d1bbbdf25e0e63ac8a7dec98aca08cafc3f870
2018-10-23 20:28:40 +02:00
vrcore_app mnt_user_file dir 118185801
Track SELinux denial caused by webview zygote. The new codepath for creating the classloader in the webview zygote triggers an selinux denial; track this until it is fixed. Bug: 123246126 Test: DeviceBootTest.SELinuxUncheckedDenialBootTest Merged-In: I6835947e81364b5dd43898199108af7b14d31088 Change-Id: I6835947e81364b5dd43898199108af7b14d31088
2019-01-22 23:15:20 +01:00
webview_zygote system_data_file lnk_file 123246126
Add bug_map entries for bugs we've seen. This adds numerous bug_map entries to try to annotate all denials we've seen. Bug: 78117980 Test: Build Change-Id: I1da0690e0b4b0a44d673a54123a0b49a0d115a49
2018-04-16 19:31:38 +02:00
zygote untrusted_app_25 process 77925912
Reference in a new issue Copy permalink