This is presumably libc isatty detection on stdin/out/err.
Either way - allowing it is harmless.
This fixes:
type=1400 audit(): avc: denied { getattr } for comm="dnsmasq" path="pipe:[38315]" dev="pipefs" ino=38315 scontext=u:r:dnsmasq:s0 tcontext=u:r:netd:s0 tclass=fifo_file permissive=0
Test: built and observed no more avc denials on crosshatch
Bug: 77868789
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ieab51aeb67ebb85b6c778410ba96963612277ae4
am: 4b184ce52b -s ours
am skip reason: change_id I24a5382649c64d36fd05a59bc87faca87e6f0eb8 with SHA1 dea144c1e5 is in history
Change-Id: Ibf8dd7e9fa754bdba9cbeba36296598851f2fa9e
These properties were moved to /vendor as part of b/130025216.
Allow them to be set by vendor_init, too.
Bug: 130025216
Bug: 131066061
Test: no SELinux warnings for said props at boot
Change-Id: I5293831bedb89e9c8d3ddf13cf7babde26872f28
am: e1757623ee -s ours
am skip reason: change_id If54884f76a32705d11f2085f66fe83b9e0354f79 with SHA1 58329f6536 is in history
Change-Id: Ica971505a9a9f491c629afe698c68e0787afe08a
am: 58329f6536 -s ours
am skip reason: change_id If54884f76a32705d11f2085f66fe83b9e0354f79 with SHA1 a5dde796b5 is in history
Change-Id: I4762f0ac9a58d9cc54b303ce81b0331b059584b2
and allow shell and system_app (Settings) to set it to enable Dynamic System Update.
Also allow priv_app (user of the API) to read it.
Bug: 119647479
Bug: 129060539
Test: run the following command on crosshatch-user:
adb shell setprop persist.sys.fflag.override.settings_dynamic_system 1
Change-Id: I24a5382649c64d36fd05a59bc87faca87e6f0eb8
Merged-In: I24a5382649c64d36fd05a59bc87faca87e6f0eb8
am: 2cdbd3a38c -s ours
am skip reason: change_id I346520c47b74fde5137ad7c777f0a9eca50a06d7 with SHA1 554b334d7b is in history
Change-Id: Ie92fd4b8934e39fec75c54741abc49c5cb65fc9d
and allow shell and system_app (Settings) to set it to enable Dynamic System Update.
Also allow priv_app (user of the API) to read it.
Bug: 119647479
Bug: 129060539
Test: run the following command on crosshatch-user:
adb shell setprop persist.sys.fflag.override.settings_dynamic_system 1
Change-Id: I24a5382649c64d36fd05a59bc87faca87e6f0eb8
Merged-In: I24a5382649c64d36fd05a59bc87faca87e6f0eb8
am: 4ac9186958 -s ours
am skip reason: change_id Iaa3651c692fd550f72e7ce6eafbf3386ee07a0c0 with SHA1 afcdbefb43 is in history
Change-Id: I780a18a10b9bedc6f46e05b1fcacea3595d3db5d
am: afcdbefb43 -s ours
am skip reason: change_id Iaa3651c692fd550f72e7ce6eafbf3386ee07a0c0 with SHA1 dc38720cfb is in history
Change-Id: I6b7f9ae2b3d1790c16c982e6e24540bab8b335ed
There were three separate neverallows here. Simplifying it to one
with only a small number of exceptions.
Bug: 131177459
Bug: 37226359
Test: m sepolicy (checks neverallows)
Change-Id: I93045c9f698f28675c634643a827a1cd513f215e
These properties were moved to /vendor as part of b/130025216.
Allow them to be set by vendor_init, too.
Bug: 130025216
Bug: 131066061
Test: no SELinux warnings for said props at boot
Change-Id: I5293831bedb89e9c8d3ddf13cf7babde26872f28
Merged-In: I5293831bedb89e9c8d3ddf13cf7babde26872f28
lmkd needs to read /proc/lowmemorykiller to send statslog events in response to
applications being killed.
Bug: 130017100
Change-Id: I929d5a372e1b2f63b7b5ed421f1898ebddaec01c