Commits
Wenbo.Zhu committed f39374acc90
MA-12499 Clean selinux errors when boot up and play video on Android P. Add sepolicies as request when boot up. Use label same_process_hal_file for some vendor libraries which are related media. avc: denied { map } for pid=4677 comm="MessageThread" path="/dev/galcore" dev="tmpfs" ino=15473 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file permissive=0 avc: denied { getattr } for pid=4677 comm="MessageThread" path="/dev/dri/renderD128" dev="tmpfs" ino=15435 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file permissive=0 avc: denied { map } for pid=3361 comm="Binder:3361_2" path="/vendor/lib64/lib_mp4_parser_arm11_elinux.3.0.so" dev="mmcblk1p10" ino=433 scontext=u:r:mediaextractor:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=1 avc: denied { read } for pid=3361 comm="Binder:3361_3" name="lib_mp4_parser_arm11_elinux.3.0.so" dev="mmcblk1p10" ino=433 scontext=u:r:mediaextractor:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=1 avc: denied { open } for pid=3361 comm="Binder:3361_3" path="/vendor/lib64/lib_mp4_parser_arm11_elinux.3.0.so" dev="mmcblk1p10" ino=433 scontext=u:r:mediaextractor:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=1 avc: denied { map } for pid=3370 comm="HwBinder:3370_5" path="/dev/mxc_hifi4" dev="tmpfs" ino=16765 scontext=u:r:mediacodec:s0 tcontext=u:object_r:audio_device:s0 tclass=chr_file permissive=1 avc: denied { read } for pid=3346 comm="Binder:3346_1" name="extractors" dev="mmcblk1p10" ino=498 scontext=u:r:mediaextractor:s0 tcontext=u:object_r:vendor_file:s0 tclass=dir permissive=0 avc: denied { open } for pid=3351 comm="mediaextractor" path="/vendor/lib64/lib_mkv_parser_arm11_elinux.3.0.so" dev="dm-1" ino=538 scontext=u:r:mediaextractor:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0 avc: denied { open } for pid=3349 comm="Binder:3349_1" path="/vendor/lib64/lib_aac_parser_arm11_elinux.3.0.so" dev="dm-1" ino=587 scontext=u:r:mediaextractor:s0 tcontext=u:object_r:vendor_file:s0 tclass=file permissive=0 Change-Id: I29811336a3f8070e364b7504ecec48802beba436 Signed-off-by: Wenbo.Zhu <wenbo.zhu_1@nxp.com> Reviewed-on: http://androidsource.ap.freescale.net/project/5664 Reviewed-by: zhang sanshan <sanshan.zhang@nxp.com> (cherry picked from commit 46f32501b621eca885d87cf44cd68d2510d31ec6) Reviewed-on: http://androidsource.ap.freescale.net/project/5678 Reviewed-by: juan.hao <juan.hao@nxp.com>