Hi,
Thanks for your comments.
I could change wallpaper by modifying file.te you suggested.
However, I have one question.
How do you find/investigate the deny comes from MSL?
Because, though I interpreted the log as
The object (wallpaper file) had no category and sensitivity of the
object and the subject were same.
The access was allowed by MLS.
the guess was incorrect.
---------------------------------------------------------------------------------------
<5>[ 508.922760] type=1400 audit(1340350990.015:190): avc: denied {
write } for pid=565 comm=42696E646572205468726561642023
path="/data/data/com.android.settings/files/wallpaper" dev=mmcblk0p12
ino=578429 scontext=u:r:trusted_app:s0:c17
tcontext=u:object_r:wallpaper_file:s0 tclass=file
---------------------------------------------------------------------------------------
best regards,
--
Ken Masumitsu
________________________________
Subject to local law, communications with Accenture and its affiliates including telephone calls and emails (including content), may be monitored by our systems for the purposes of security and the assessment of internal compliance with Accenture policy.
______________________________________________________________________________________
www.accenture.com
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
