• Robert Craig's avatar
    Allow all appdomains to grab file attributes of wallpaper_file. · fc4c6b79
    Robert Craig authored
    When setting a static wallpaper on multiple devices the
    following denials were encountered.
       avc:  denied  { getattr } for  pid=1775 comm="llpaper_chooser" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:shared_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
       avc:  denied  { getattr } for  pid=799 comm="ndroid.systemui" path="/data/system/users/0/wallpaper" dev="mmcblk0p23" ino=104679 scontext=u:r:platform_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
       avc:  denied  { getattr } for  pid=1909 comm=4173796E635461736B202332 path="/data/system/users/0/wallpaper" dev="mmcblk0p28" ino=586422 scontext=u:r:release_app:s0 tcontext=u:object_r:wallpaper_file:s0 tclass=file
    
    platform_app access is from the SystemUI app whereas the other
    denials are from the Launcher that is used on the particular
    device. For instance, Launcher2 triggers the shared_app denial
    whereas release_app (used by Launcher3) ...
    fc4c6b79
app.te 13.9 KB