Add sepolicy for dm backend app by chenyanxzhu · Pull Request #334 · projectceladon/device-intel-sepolicy

chenyanxzhu · 2024-08-15T07:23:58Z

Tracked-On:

sysopenci · 2024-08-15T07:24:57Z

Improper Commit Message
Proper Tracked on value is not present in
commit message,make sure Tracked-on: jira-ticket is present

sysopenci · 2024-08-16T08:08:58Z

Improper Commit Message
Proper Tracked on value is not present in
commit message,make sure Tracked-on: jira-ticket is present

sysopenci · 2024-08-20T09:01:05Z

Improper Commit Message
Proper Tracked on value is not present in
commit message,make sure Tracked-on: jira-ticket is present

sysopenci · 2024-08-21T02:35:43Z

Improper Commit Message
Proper Tracked on value is not present in
commit message,make sure Tracked-on: jira-ticket is present

sysopenci · 2024-08-21T07:42:07Z

Improper Commit Message
Proper Tracked on value is not present in
commit message,make sure Tracked-on: jira-ticket is present

sysopenci · 2024-08-22T22:51:41Z

Improper Commit Message
Proper Tracked on value is not present in
commit message,make sure Tracked-on: jira-ticket is present

sysopenci · 2024-08-26T09:29:28Z

Improper Commit Message
Proper Tracked on value is not present in
commit message,make sure Tracked-on: jira-ticket is present

feijiang1

LGTM

sysopenci · 2024-09-18T07:36:20Z

Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci · 2024-09-18T09:16:49Z

SUCCESS: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci · 2024-09-18T11:45:58Z

Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci · 2024-09-18T15:17:55Z

FAILURE: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details.

ceiba1985 · 2024-09-18T15:43:50Z

@@ -0,0 +1,36 @@
+type dm_backend_ipc_data_file, file_type, data_file_type;
+type dm_backend_app_data_file, file_type, data_file_type, app_data_file_type;


put these two lines to file.te

ceiba1985 · 2024-09-18T15:44:08Z

+app_domain(dm_backend_client_app)
+net_domain(dm_backend_client_app)
+
+#permissive dm_backend_client_app;


remove all the rules you comment out

ceiba1985 · 2024-09-18T15:44:18Z

+allow dm_backend_client_app dm_backend_app_data_file:dir create_dir_perms;
+#allow dm_backend_client_app default_prop:file read;
+#get_prop(dm_backend_client_app, default_prop)
+allow dm_backend_client_app dm_backend_app_data_file:file unlink;


remote this line

ceiba1985 · 2024-09-18T15:44:37Z

+allow dm_backend_client_app activity_service:service_manager find;
+allow dm_backend_client_app activity_task_service:service_manager find;
+allow dm_backend_client_app content_capture_service:service_manager find;
+allow dm_backend_client_app dm_backend_app_data_file:file { create open read setattr write };


use create_file_perms instead

ceiba1985 · 2024-09-18T15:46:25Z

+#dm_backend_app /data/vendor/dm_backend_app permission
+/data/vendor/dm_backend_app(/.*)?       u:object_r:dm_backend_ipc_data_file:s0
+/system/bin/dm-backend                    u:object_r:dm_backend_server_exec:s0
+/system/bin/acrn-bkend-server             u:object_r:dm_backend_server_exec:s0


don't assign a vendor file type to file in system partition

sysopenci · 2024-09-18T16:18:49Z

Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci · 2024-09-19T02:38:50Z

SUCCESS: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci · 2024-09-19T06:19:21Z

one of the dependent pr cannot be Rebase and Merged; please fix the issue and commit your changes once again to run EB.

sysopenci · 2024-09-19T06:45:50Z

Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci · 2024-09-19T09:49:57Z

SUCCESS: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details.

Tracked-On: OAM-124639 Signed-off-by: chenyanxzhu <chenyanx.zhu@intel.com>

sysopenci · 2024-11-13T07:50:47Z

Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci · 2024-11-13T08:28:15Z

FAILURE: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci · 2024-11-14T05:39:56Z

Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci · 2024-11-14T06:07:15Z

FAILURE: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details.

sysopenci added the Invalid commit message label Aug 15, 2024

sysopenci added Pending Developer Approval Pending Developer Approval Pending PR Review Pending PR Review Engineering Build Not Started Engineering Build Not Started labels Aug 15, 2024

chenyanxzhu force-pushed the umr0_dm_backend branch from 3d8d49e to facb64d Compare August 16, 2024 08:07

sysopenci added Invalid commit message and removed Invalid commit message labels Aug 16, 2024

chenyanxzhu force-pushed the umr0_dm_backend branch from facb64d to 6af2895 Compare August 20, 2024 09:00

sysopenci added Invalid commit message and removed Invalid commit message labels Aug 20, 2024

chenyanxzhu force-pushed the umr0_dm_backend branch from 6af2895 to 3e8a74f Compare August 21, 2024 02:34

sysopenci added Invalid commit message and removed Invalid commit message labels Aug 21, 2024

chenyanxzhu force-pushed the umr0_dm_backend branch from 3e8a74f to 5ec14c1 Compare August 21, 2024 07:41

sysopenci added Invalid commit message and removed Invalid commit message labels Aug 21, 2024

chenyanxzhu force-pushed the umr0_dm_backend branch from 5ec14c1 to 4ba20fb Compare August 22, 2024 22:50

sysopenci added Invalid commit message and removed Invalid commit message labels Aug 22, 2024

chenyanxzhu force-pushed the umr0_dm_backend branch from 4ba20fb to 092dc50 Compare August 26, 2024 09:28

sysopenci added Invalid commit message and removed Invalid commit message labels Aug 26, 2024

feijiang1 approved these changes Sep 12, 2024

View reviewed changes

sysopenci removed the request for review from GangSecurity September 18, 2024 02:30

chenyanxzhu force-pushed the umr0_dm_backend branch from e0ab594 to 14480d9 Compare September 18, 2024 07:33

sysopenci added Valid commit message and removed Valid commit message PR approved labels Sep 18, 2024

sysopenci requested review from GangSecurity, JeevakaPrabu, balajim001, ceiba1985, dyang23, gkdeepa, kwang13, lchen43, sgnanase and swaroopbalan September 18, 2024 07:35

ceiba1985 reviewed Sep 18, 2024

View reviewed changes

Add sepolicy for dm backend app

1ec42f7

Tracked-On: OAM-124639 Signed-off-by: chenyanxzhu <chenyanx.zhu@intel.com>

		@@ -0,0 +1,36 @@
		type dm_backend_ipc_data_file, file_type, data_file_type;
		type dm_backend_app_data_file, file_type, data_file_type, app_data_file_type;

Uh oh!

Conversation

chenyanxzhu commented Aug 15, 2024

Uh oh!

sysopenci commented Aug 15, 2024

Uh oh!

sysopenci commented Aug 16, 2024

Uh oh!

sysopenci commented Aug 20, 2024

Uh oh!

sysopenci commented Aug 21, 2024

Uh oh!

sysopenci commented Aug 21, 2024

Uh oh!

sysopenci commented Aug 22, 2024

Uh oh!

sysopenci commented Aug 26, 2024

Uh oh!

feijiang1 left a comment

Choose a reason for hiding this comment

Uh oh!

sysopenci commented Sep 18, 2024

Uh oh!

sysopenci commented Sep 18, 2024

Uh oh!

sysopenci commented Sep 18, 2024

Uh oh!

sysopenci commented Sep 18, 2024

Uh oh!

ceiba1985 Sep 18, 2024

Choose a reason for hiding this comment

Uh oh!

ceiba1985 Sep 18, 2024

Choose a reason for hiding this comment

Uh oh!

ceiba1985 Sep 18, 2024

Choose a reason for hiding this comment

Uh oh!

ceiba1985 Sep 18, 2024

Choose a reason for hiding this comment

Uh oh!

ceiba1985 Sep 18, 2024

Choose a reason for hiding this comment

Uh oh!

sysopenci commented Sep 18, 2024

Uh oh!

sysopenci commented Sep 19, 2024

Uh oh!

sysopenci commented Sep 19, 2024

Uh oh!

sysopenci commented Sep 19, 2024

Uh oh!

sysopenci commented Sep 19, 2024

Uh oh!

sysopenci commented Nov 13, 2024

Uh oh!

sysopenci commented Nov 13, 2024

Uh oh!

sysopenci commented Nov 14, 2024

Uh oh!

sysopenci commented Nov 14, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants