Re: [PATCH 1/1] Appdomain write to cgroup on android_cts enabled

[Haiqing Jiang <hqjiang1988@xxxxxxxxx>]

The denial info is:

<5>[ 2223.830596] type=1400 audit(1342221805.835:19): avc:  denied  { write } for  pid=2687 comm="ationTestRunner" name="10038" dev=cgroup ino=4532 scontext=u:r:untrusted_app:s0:c38 tcontext=u:object_r:cgroup:s0 tclass=dir

I really appreciate your comments. Thanks.

On Fri, Jul 27, 2012 at 3:51 PM, Haiqing Jiang <hqjiang1988@xxxxxxxxx> wrote:

---
 cts.te |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/cts.te b/cts.te
index ff8a9f0..7877b19 100644
--- a/cts.te
+++ b/cts.te
@@ -31,6 +31,9 @@ allow appdomain system_file:file rx_file_perms;
 allow appdomain apk_tmp_file:file rw_file_perms;
 allow appdomain shell_data_file:file r_file_perms;

+# Write to cgroup
+allow appdomain cgroup:dir write;
+
 # Read routing information.
 allow netdomain self:netlink_route_socket { create read write nlmsg_read };

--
1.7.0.4

--

-----------------------------------

Haiqing Jiang, PH.D student

Computer Science Department, North Carolina State University