diff --git a/sepolicy/ohos_policy/hiviewdfx/hiview/system/hiview.te b/sepolicy/ohos_policy/hiviewdfx/hiview/system/hiview.te index eee8f227fddd7458c3d7b671a42a2cadd38d8203..894585948781fa94b30b13cf203e5be95b218199 100644 --- a/sepolicy/ohos_policy/hiviewdfx/hiview/system/hiview.te +++ b/sepolicy/ohos_policy/hiviewdfx/hiview/system/hiview.te @@ -299,3 +299,6 @@ allow hiview sa_netsys_native_manager:samgr_class { get }; allow hiview data_log:fifo_file { create read write open unlink }; allow hiview sa_xperf_service:samgr_class { add }; + +# avc: denied { call } for pid=619, comm="/system/bin/hiview" scontext=u:r:hiview:s0 tcontext=u:r:av_codec_service:s0 tclass=binder permissive=1 +allow hiview av_codec_service:binder { call }; diff --git a/sepolicy/ohos_policy/multimedia/audio/system/audio_server.te b/sepolicy/ohos_policy/multimedia/audio/system/audio_server.te index 32fbef4d2a8edfc02576b7c621174512ccb6f469..690a1ac0993c564e2616f3b79ebcc583b7f2cc11 100644 --- a/sepolicy/ohos_policy/multimedia/audio/system/audio_server.te +++ b/sepolicy/ohos_policy/multimedia/audio/system/audio_server.te @@ -215,3 +215,8 @@ allow audio_server sa_foundation_appms:samgr_class { get }; allow audio_server audio_server:capability { sys_nice }; allow audio_server sa_storage_manager_service:samgr_class { get }; +# avc: denied { call } for pid=787, comm="/system/bin/sa_main" scontext=u:r:audio_server:s0 tcontext=u:r:hiview:s0 tclass=binder permissive=1 +allow audio_server hiview:binder { call }; + +# avc: denied { get } for service=8600 sid=u:r:audio_server:s0 scontext=u:r:audio_server:s0 tcontext=u:object_r:sa_xperf_service:s0 tclass=samgr_class permissive=1 +allow audio_server sa_xperf_service:samgr_class { get }; diff --git a/sepolicy/ohos_policy/multimedia/av_codec/system/av_codec_service.te b/sepolicy/ohos_policy/multimedia/av_codec/system/av_codec_service.te index b189fdbb6c656dda29ea5ef8143a405dbe0ae7f1..d736e072df1bc437b66b6e7554d741b5920dc9fe 100755 --- a/sepolicy/ohos_policy/multimedia/av_codec/system/av_codec_service.te +++ b/sepolicy/ohos_policy/multimedia/av_codec/system/av_codec_service.te @@ -137,3 +137,5 @@ allow av_codec_service foundation:binder { call }; allow av_codec_service dev_kmsg_file:chr_file { open read write }; allow av_codec_service tty_device:chr_file { open read write }; allow av_codec_service sys_prod_file:dir { search }; +# avc: denied { get } for service=8600 sid=u:r:av_codec_service:s0 scontext=u:r:av_codec_service:s0 tcontext=u:object_r:sa_xperf_service:s0 tclass=samgr_class permissive=1 +allow av_codec_service sa_xperf_service:samgr_class { get };