Hi,
I am using Kernel 4.19 and Android Nougat r7.1.1_r58 and I am having issues
with selinux. During bootup I get this:
[ 3.563247] SELinux: Permission validate_trans in class security not
defined in policy.
[ 3.572142] SELinux: Permission getrlimit in class process not defined
in policy.
[ 3.580066] SELinux: Class process2 not defined in policy.
[ 3.586061] SELinux: Permission map in class file not defined in policy.
[ 3.593279] SELinux: Permission map in class dir not defined in policy.
[ 3.600313] SELinux: Permission map in class lnk_file not defined in
policy.
[ 3.607872] SELinux: Permission map in class chr_file not defined in
policy.
[ 3.615429] SELinux: Permission map in class blk_file not defined in
policy.
[ 3.622979] SELinux: Permission map in class sock_file not defined in
policy.
[ 3.630554] SELinux: Permission map in class fifo_file not defined in
policy.
[ 3.638206] SELinux: Permission map in class socket not defined in
policy.
[ 3.645592] SELinux: Permission map in class tcp_socket not defined in
policy.
[ 3.653361] SELinux: Permission map in class udp_socket not defined in
policy.
[ 3.661024] SELinux: Permission map in class rawip_socket not defined
in policy.
[ 3.668952] SELinux: Permission map in class netlink_socket not defined
in policy.
[ 3.677043] SELinux: Permission map in class packet_socket not defined
in policy.
[ 3.685034] SELinux: Permission map in class key_socket not defined in
policy.
[ 3.692764] SELinux: Permission map in class unix_stream_socket not
defined in policy.
[ 3.701164] SELinux: Permission map in class unix_dgram_socket not
defined in policy.
[ 3.709554] SELinux: Permission map in class netlink_route_socket not
defined in policy.
[ 3.718219] SELinux: Permission map in class netlink_tcpdiag_socket not
defined in policy.
[ 3.727047] SELinux: Permission map in class netlink_nflog_socket not
defined in policy.
[ 3.735681] SELinux: Permission map in class netlink_xfrm_socket not
defined in policy.
[ 3.744244] SELinux: Permission map in class netlink_selinux_socket not
defined in policy.
[ 3.753078] SELinux: Permission map in class ne[ 3.779391] SELinux:
Permission map in class netlink_connector_socket not defined in policy.
[ 3.788399] SELinux: Permission map in class netlink_netfilter_socket
not defined in policy.
[ 3.797408] SELinux: Permission map in class netlink_dnrt_socket not
defined in policy.
[ 3.805955] SELinux: Permission map in class
netlink_kobject_uevent_socket not defined in policy.
[ 3.815406] SELinux: Permission map in class netlink_generic_socket not
defined in policy.
[ 3.824230] SELinux: Permission map in class
netlink_scsitransport_socket not defined in policy.
[ 3.833597] SELinux: Permission map in class netlink_rdma_socket not
defined in policy.
[ 3.843730] SELinux: Permission map in class netlink_crypto_socket not
defined in policy.
[ 3.852587] SELinux: Permission map in class appletalk_socket not
defined in policy.
[ 3.860806] SELinux: Permission map in class dccp_socket not defined in
policy.
[ 3.868673] SELinux: Permission map in class tun_socket not defined in
policy.
[ 3.876421] SELinux: Class cap_userns not defined in policy.
[ 3.882507] SELinux: Class cap2_userns not defined in policy.
[ 3.888622] SELinux: Class sctp_socket not defined in policy.
[ 3.894785] SELinux: Class icmp_socket not defined in policy.
[ 3.900897] SELinux: Class ax25_socket not defined in policy.
[ 3.907074] SELinux: Class ipx_socket not defined in policy.
[ 3.913161] SELinux: Class netrom_socket not defined in policy.
[ 3.919459] SELinux: Class atmpvc_socket not defined in policy.
[ 3.925821] SELinux: Class x25_socket not defined in policy.
[ 3.931902] SELinux: Class rose_socket not defined in policy.
[ 3.938012] SELinux: Class decnet_socket not defined in policy.
[ 3.944376] SELinux: Class atmsvc_socket not defined in policy.
[ 3.950664] SELinux: Class rds_socket not defined in policy.
[ 3.956742] SELinux: Class irda_socket not defined in policy.
[ 3.962910] SELinux: Class pppox_socket not defined in policy.
[ 3.969111] SELinux: Class llc_socket not defined in policy.
[ 3.975517] SELinux: Class can_socket not defined in policy.
[ 4.094631] SELinux: the above unknown classes and permissions will be
denied
audit: type=1400 audit(4.520:3): avc: denied { map } for pid=1
comm="init" path="/file_contexts.bin" dev="rootfs" ino=8020
scontext=u:r:kernel:s0 tcontext=u:object_r:rootfs:s0 tclass=file
permissive=1
....
I added permissions for avc denied rules for map etc but while compiling I
get :
:ERROR 'permission map is not defined for class file' at token ';' on line
20937
It is not clear in Android documentation where to add the permission for
the class and in which files. Could somebody please help me with this?
Thanks,
Gautam.
--
--
You received this message because you are subscribed to the "Android Building"
mailing list.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-building?hl=en
---
You received this message because you are subscribed to the Google Groups
"Android Building" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
