type=1400 audit(506975.539:15): avc: denied { read write }

9,031 views
Skip to first unread message

Deepak Nasir

unread,
Apr 30, 2018, 12:41:49 PM4/30/18
to android-porting
 type=1400 audit(506975.539:15): avc: denied { read write } for pid=5920 comm="print" name="prn0" dev="tmpfs" ino=1600 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:device:s0 tclass=chr_file permissive=0

can anyone help me to resolve this issue.
thankyou

Jeshurun Edward

unread,
May 2, 2018, 11:08:10 AM5/2/18
to android-porting

Hi Deepak
     
     From the top of the AOSP directory issue these commands, (for more info read- https://source.android.com/security/selinux/validate)

adb pull /sys/fs/selinux/policy
adb logcat -b all -d | audit2allow -p policy

it should output something like this

#============= bootanim ==============
allow bootanim rootfs:lnk_file getattr;

  
Now navigate to the sepolicy directory of your device's folder(TOP/device/your_device/sepolicy) and add the allow rule returned above, in the respective te file.
Here I add this (allow bootanim rootfs:lnk_file getattr; ) line to (bootanim.te) file.

Hope this helps.


Regards 
Jeshurun

 


Reply all
Reply to author
Forward
0 new messages