Thanks for the hints.
The sdcard is here a part on the data partition. The problem were some
backup files created before Android with SELinux was deployed. Therefore
the directory was unlabeled.
After formatting the partition it was created with the correct permissions.
Regards Janosch
Am 06.08.2013 16:04, schrieb Stephen Smalley:
> On 08/06/2013 09:04 AM, Janosch Maier wrote:
>> When trying to create a screenshot I get the following messages:
>>
>> type=1400 msg=audit(1375793698.910:17): avc: denied { getattr } for
>> pid=1893 comm="sdcard" path="/data/media" dev=mmcblk0p12 ino=316369
>> scontext=u:r:sdcardd:s0 tcontext=u:object_r:unlabeled:s0 tclass=dir
>> type=1400 msg=audit(1375793700.785:18): avc: denied { write } for
>> pid=1880 comm="sdcard" name="Screenshots" dev=mmcblk0p12 ino=316402
>> scontext=u:r:sdcardd:s0 tcontext=u:object_r:unlabeled:s0 tclass=dir
>> type=1400 msg=audit(1375793700.785:19): avc: denied { add_name } for
>> pid=1880 comm="sdcard" name="Screenshot_2013-08-06-14-55-00.png"
>> scontext=u:r:sdcardd:s0 tcontext=u:object_r:unlabeled:s0 tclass=dir
>> type=1400 msg=audit(1375793700.785:20): avc: denied { create } for
>> pid=1880 comm="sdcard" name="Screenshot_2013-08-06-14-55-00.png"
>> scontext=u:r:sdcardd:s0 tcontext=u:object_r:unlabeled:s0 tclass=file
>> type=1400 msg=audit(1375793700.785:21): avc: denied { read write } for
>> pid=1893 comm="sdcard" name="Screenshot_2013-08-06-14-55-00.png"
>> dev=mmcblk0p12 ino=316416 scontext=u:r:sdcardd:s0
>> tcontext=u:object_r:unlabeled:s0 tclass=file
>> type=1400 msg=audit(1375793700.785:22): avc: denied { open } for
>> pid=1893 comm="sdcard" name="Screenshot_2013-08-06-14-55-00.png"
>> dev=mmcblk0p12 ino=316416 scontext=u:r:sdcardd:s0
>> tcontext=u:object_r:unlabeled:s0 tclass=file
>>
>> However the created screenshot in the /sdcard/Pictures/Screenshots
>> folder will get the correct labels:
>> -rw-rw-r-- root sdcard_rw u:object_r:sdcard_internal:s0
>> Screenshot_2013-08-06-14-55-00.png
>>
>> I am trying to allow capturing screenshots.
>
> Did you restorecon -R /data/media first? How is /data/media being
> initially created on your device?
>
--
This message was distributed to subscribers of the seandroid-list mailing list.
If you no longer wish to subscribe, send mail to [email protected] with
the words "unsubscribe seandroid-list" without quotes as the message.
