Typing this from my phone, might not be great. Dac override is triggered
when the process permissions don't match with the owner group and mode of a
file. Dan Walsh has info on it here:
http://danwalsh.livejournal.com/69478.html

I would try and add an auditallow statement(s) to find what file it's
accessing that might be causing this, and then adjust the dac permissions
accordingly.
On Jun 16, 2016 09:50, "YongQin Liu" <yongqin....@linaro.org> wrote:

> Hi, ALL
>
> I am playing the AOSP master with hikey board, and I get the
> following dac_override  avc denial on logd command:
>
> avc:  denied  { dac_override } for  pid=1763 comm="logd" capability=1
>  scontext=u:r:logd:s0 tcontext=u:r:logd:s0 tclass=capability permissive=1
>
> I built the same source for Nexus9 board, and I did not see such
> dac_override denial on logd with that Nexus9 board.
>
> Searched "logd" in he device projects for hikey and Nexus9, but did not
> find any clue on that
> why I got the dac_override  avc denial on logd with the hikey build,
>
>
> Referenced the document here:
>
> http://source.android.com/security/selinux/device-policy.html#granting_the_dac_override_capability
>
> But still have no idea how to change to eliminate the dac_override denial
> for logd command.
>
> Do you have any idea on what happens there, or where to check on it?
>
> Thanks in advance!
>
> --
> Best Regards,
> Yongqin Liu
> ---------------------------------------------------------------
> #mailing list
> linaro-andr...@lists.linaro.org <linaro-...@lists.linaro.org>
> http://lists.linaro.org/mailman/listinfo/linaro-android
>
> _______________________________________________
> Seandroid-list mailing list
> Seandroid-list@tycho.nsa.gov
> To unsubscribe, send email to seandroid-list-le...@tycho.nsa.gov.
> To get help, send an email containing "help" to
> seandroid-list-requ...@tycho.nsa.gov.
>
_______________________________________________
Seandroid-list mailing list
Seandroid-list@tycho.nsa.gov
To unsubscribe, send email to seandroid-list-le...@tycho.nsa.gov.
To get help, send an email containing "help" to 
seandroid-list-requ...@tycho.nsa.gov.

Reply via email to