已合并
Add rename permissions for print isolate HAP #8300
河蟹能吃吗创建于 17 天前
Add rename permissions for print isolate HAP #8300
已合并
共 1 个文件变更+4-0
| @@ -24,6 +24,10 @@ allow print_isolate_hap accountmgr:binder { call transfer }; | |||
| 24 | #avc: denied { rmdir } for pid=8355, comm="/system/bin/appspawn" name="/app/el2/100/base/com.huawei.hmos.ailife/haps/phone/cache/cv81/filestemp" dev="/dev/block/platform/fa500000.ufs/by-name/userdata" ino=77802 scontext=u:r:print_isolate_hap:s0 tcontext=u:object_r:appdat:s0 tclass=dir permissive=0 | 24 | #avc: denied { rmdir } for pid=8355, comm="/system/bin/appspawn" name="/app/el2/100/base/com.huawei.hmos.ailife/haps/phone/cache/cv81/filestemp" dev="/dev/block/platform/fa500000.ufs/by-name/userdata" ino=77802 scontext=u:r:print_isolate_hap:s0 tcontext=u:object_r:appdat:s0 tclass=dir permissive=0 |
| 25 | allow print_isolate_hap appdat:dir { getattr ioctl open read search create setattr write add_name remove_name rmdir }; | 25 | allow print_isolate_hap appdat:dir { getattr ioctl open read search create setattr write add_name remove_name rmdir }; |
| 26 | allow print_isolate_hap normal_hap_data_file:dir { getattr ioctl open read search create setattr write add_name remove_name rmdir }; | 26 | allow print_isolate_hap normal_hap_data_file:dir { getattr ioctl open read search create setattr write add_name remove_name rmdir }; |
| 27 | + | ||
| 28 | +# avc: denied { rename } for pid=11866, comm="/system/bin/appspawn" name="/app/el2/100/base/<redacted-package>/haps/entry/temp" dev="/dev/block/platform/b0000000.hi_pcie/by-name/userdata" ino=110889 scontext=u:r:print_isolate_hap:s0 tcontext=u:object_r:appdat:s0 tclass=dir permissive=0 | ||
| 29 | +allow print_isolate_hap normal_app_data:dir { rename }; | ||
| 30 | + | ||
| 27 | allow print_isolate_hap appdat:file { append getattr ioctl lock map open read setattr write create unlink }; | 31 | allow print_isolate_hap appdat:file { append getattr ioctl lock map open read setattr write create unlink }; |
| 28 | allow print_isolate_hap normal_hap_data_file:file { append getattr ioctl lock map open read setattr write create unlink }; | 32 | allow print_isolate_hap normal_hap_data_file:file { append getattr ioctl lock map open read setattr write create unlink }; |
| 29 | allow print_isolate_hap appspawn:fd { use }; | 33 | allow print_isolate_hap appspawn:fd { use }; |