Typing this from my phone, might not be great. Dac override is triggered when the process permissions don't match with the owner group and mode of a file. Dan Walsh has info on it here: http://danwalsh.livejournal.com/69478.html
I would try and add an auditallow statement(s) to find what file it's accessing that might be causing this, and then adjust the dac permissions accordingly. On Jun 16, 2016 09:50, "YongQin Liu" <yongqin....@linaro.org> wrote: > Hi, ALL > > I am playing the AOSP master with hikey board, and I get the > following dac_override avc denial on logd command: > > avc: denied { dac_override } for pid=1763 comm="logd" capability=1 > scontext=u:r:logd:s0 tcontext=u:r:logd:s0 tclass=capability permissive=1 > > I built the same source for Nexus9 board, and I did not see such > dac_override denial on logd with that Nexus9 board. > > Searched "logd" in he device projects for hikey and Nexus9, but did not > find any clue on that > why I got the dac_override avc denial on logd with the hikey build, > > > Referenced the document here: > > http://source.android.com/security/selinux/device-policy.html#granting_the_dac_override_capability > > But still have no idea how to change to eliminate the dac_override denial > for logd command. > > Do you have any idea on what happens there, or where to check on it? > > Thanks in advance! > > -- > Best Regards, > Yongqin Liu > --------------------------------------------------------------- > #mailing list > linaro-andr...@lists.linaro.org <linaro-...@lists.linaro.org> > http://lists.linaro.org/mailman/listinfo/linaro-android > > _______________________________________________ > Seandroid-list mailing list > Seandroid-list@tycho.nsa.gov > To unsubscribe, send email to seandroid-list-le...@tycho.nsa.gov. > To get help, send an email containing "help" to > seandroid-list-requ...@tycho.nsa.gov. >
_______________________________________________ Seandroid-list mailing list Seandroid-list@tycho.nsa.gov To unsubscribe, send email to seandroid-list-le...@tycho.nsa.gov. To get help, send an email containing "help" to seandroid-list-requ...@tycho.nsa.gov.