tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/public
History
Steven Moreland 248f0e069a Update transaction log permissions. 
I locked down binderfs in Android V (this release still), but
part of it was opened up too much, so transactions restricted
to userdebug.

transaction_log and failed_transaction_log are not used in AOSP,
but they are requested by partners.

Bug: 316970771 for transactions
Bug: 336711420 for request to open up transaction history logs
Test: boot, bugreport, also:

:) adb shell ls -Z /dev/binderfs/binder_logs
u:object_r:binderfs_logs_transaction_history:s0 failed_transaction_log
u:object_r:binderfs_logs_proc:s0                proc
u:object_r:binderfs_logs:s0                     state
u:object_r:binderfs_logs_stats:s0               stats
u:object_r:binderfs_logs_transaction_history:s0 transaction_log
u:object_r:binderfs_logs_transactions:s0        transactions
:) adb shell cat /dev/binderfs/binder_logs/transaction_log
10058502: reply from 6450:8668 to 6766:6766 context binder node 0 handle -1 size 36:0 ret 0/0 l=0
10058503: call  from 6766:6766 to 6450:0 context binder node 199747 handle 23 size 116:0 ret 0/0 l=0
10058504: reply from 6450:8668 to 6766:6766 context binder node 0 handle -1 size 12:0 ret 0/0 l=0
10058505: call  from 6766:6766 to 6450:0 context binder node 199747 handle 23 size 84:0 ret 0/0 l=0
...
:) adb shell cat /dev/binderfs/binder_logs/failed_transaction_log
26418: reply from 584:1568 to 0:0 context binder node 0 handle -1 size 20:0 ret 29189/0 l=3194
57265: async from 2978:4304 to 3039:0 context binder node 40111 handle 6 size 96:0 ret 29189/-3 l=3465
57269: call  from 4437:4613 to 670:0 context binder node 57183 handle 44 size 116:0 ret 29189/-3 l=3465
57288: async from 4252:4450 to 3039:0 context binder node 34895 handle 1 size 92:0 ret 29189/-3 l=3465
...

Change-Id: I73e570dee8e59e76acaf0def615701e0e85e207f
2024-05-17 22:35:55 +00:00
..
adbd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
aidl_lazy_test_server.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
apexd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
app_zygote.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
artd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
asan_extract.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
atrace.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
attributes Revert^4 "[avf][rkp] Allow virtualizationservice to register RKP HAL" 2023-11-22 08:21:27 +00:00
audioserver.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
blkid.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
blkid_untrusted.te
bluetooth.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
bootanim.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
bootstat.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
bpfloader.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
bufferhubd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
cameraserver.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
charger.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
charger_vendor.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
crash_dump.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
credstore.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
device.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
dhcp.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
dnsmasq.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
drmserver.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
dumpstate.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
e2fs.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
ephemeral_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
evsmanagerd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
extra_free_kbytes.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
fastbootd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
file.te Update transaction log permissions. 2024-05-17 22:35:55 +00:00
fingerprintd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
flags_health_check.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
fsck.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
fsck_untrusted.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
gatekeeperd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
global_macros global_macros: trim back various watch* permissions 2019-08-28 12:36:58 -07:00
gmscore_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
gpuservice.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
hal_graphics_composer.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
healthd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
heapprofd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
hwservice.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
hwservicemanager.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
idmap.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
incident.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
incident_helper.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
incidentd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
init.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
inputflinger.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
installd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
ioctl_defines Allow vold to use FS_IOC_GET_ENCRYPTION_KEY_STATUS 2023-02-23 00:49:42 +00:00
ioctl_macros sepolicy: allow new BINDER_GET_EXTENDED_ERROR ioctl 2022-05-10 04:20:09 +00:00
isolated_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
isolated_compute_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
kernel.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
keystore.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
keystore_keys.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
llkd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
lmkd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
logd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
logpersist.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
mdnsd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
mediadrmserver.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
mediaextractor.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
mediametrics.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
mediaprovider.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
mediaserver.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
mediaswcodec.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
mediatranscoding.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
modprobe.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
mtp.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
net.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
netd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
netutils_wrapper.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
network_stack.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
neverallow_macros neverallow_macros: add watch* perms 2019-09-05 09:54:43 -07:00
nfc.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
otapreopt_chroot.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
perfetto.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
performanced.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
platform_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
postinstall.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
ppp.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
priv_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
prng_seeder.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
profman.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
property.te Guard new types with starting_at_board_api macro 2024-04-23 02:05:24 +00:00
radio.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
recovery.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
recovery_persist.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
recovery_refresh.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
rkpd_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
roles
rs.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
rss_hwm_reset.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
runas.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
runas_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
sdcardd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
secure_element.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
service.te Change WifiScanner from system_api_service to app_api_service 2024-05-09 00:13:26 +00:00
servicemanager.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
sgdisk.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
shared_relro.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
shell.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
simpleperf.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
simpleperf_app_runner.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
slideshow.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
statsd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
su.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
surfaceflinger.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
system_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
system_server.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
te_macros Allow su to access virtualization 2023-12-20 14:55:28 +00:00
tee.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
tombstoned.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
toolbox.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
traced.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
traced_perf.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
traced_probes.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
traceur_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
ueventd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
uncrypt.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
untrusted_app.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
update_engine.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
update_verifier.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
usbd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vdc.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vendor_init.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vendor_misc_writer.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vendor_modprobe.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vendor_shell.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vendor_toolbox.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
virtual_touchpad.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vndservice.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vndservicemanager.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vold.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
vold_prepare_subdirs.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
watchdogd.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
webview_zygote.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
wificond.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00
zygote.te Add "DO NOT ADD statements" comments to public 2024-03-28 11:27:43 +09:00