mq_open in agl-compositor gets Permission denied

Hello everyone,

We are implementing one of PoC using AGL v10.0.0.

It requires to use mqueue in agl-compositor. This idea is not good, it will be considered later on, but we don’t have time to do so.

agl-compositor calls mq_open, but it returns errno:13 Permission denied, then the following log is observed in dmesg.

Jun 29 03:06:51 h3ulcb audit[3634]: AVC lsm=SMACK fn=smack_inode_permission action="" subject="System::Weston" object="_" requested=wx pid=3634 comm="agl-compositor" name="/" dev="mqueue" ino=7460

Jun 29 03:06:51 h3ulcb audit[3634]: SYSCALL arch=c00000b7 syscall=180 success=no exit=-13 a0=ffff88000db1 a1=80040 a2=1b6 a3=ffff974e9418 items=0 ppid=1 pid=3634 auid=4294967295 uid=200 gid=200 euid=200 suid=200 fsuid=200 egid=200 sgid=200 fsgid=200 tty=tty7 ses=4294967295 comm="agl-compositor" exe="/usr/bin/agl-compositor" subj=System::Weston key=(null)

Jun 29 03:06:51 h3ulcb kernel: audit: type=1400 audit(1593400011.767:4): lsm=SMACK fn=smack_inode_permission action="" subject="System::Weston" object="_" requested=wx pid=3634 comm="agl-compositor" name="/" dev="mqueue" ino=7460

Jun 29 03:06:51 h3ulcb kernel: audit: type=1300 audit(1593400011.767:4): arch=c00000b7 syscall=180 success=no exit=-13 a0=ffff88000db1 a1=80040 a2=1b6 a3=ffff974e9418 items=0 ppid=1 pid=3634 auid=4294967295 uid=200 gid=200 euid=200 suid=200 fsuid=200 egid=200 sgid=200 fsgid=200 tty=tty7 ses=4294967295 comm="agl-compositor" exe="/usr/bin/agl-compositor" subj=System::Weston key=(null)

It seems like hitting security issue. Could you tell us how to resolve it? This is just a PoC, so a dirty hack is fine. Thank you.

Best regards

Kenji Hosokawa

------------------------------------------------

Hosokawa Kenji (細川健児)

Advanced Driver Information Technology Corp.

Software Group (ADITJ/SWG)

1-1 Showa-cho, Kariya-shi

Aichi-ken 448-8661, Japan

Tel. +81-566-61-4555

Fax +81-566-25-4774

khosokawa@xxxxxxxxxxxxxx

www.adit-jv.com

------------------------------------------------