Received: by 2002:a05:6500:1b8f:b0:1fa:5c73:8e2d with SMTP id df15csp621756lqb; Wed, 29 May 2024 06:11:02 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCXhNhoIvPknlWan7zFIjFnRSH7M8eCYJHgWiY+DM5Tg1OK94vNxqGJKn7JkkCS0k+OB7W8rkRlmdPfCXcW0IvBi1/+sinrOV14Wtwwitw== X-Google-Smtp-Source: AGHT+IEYMjJKWX5xotsESPtyHyZCfuHzUouaAA/euzs9pE6KqdhVlNkoELw7O26SQUn+tWU70uqA X-Received: by 2002:a17:90a:c598:b0:2bd:e316:ae2d with SMTP id 98e67ed59e1d1-2bf5ee148femr13706118a91.16.1716988261616; Wed, 29 May 2024 06:11:01 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1716988261; cv=pass; d=google.com; s=arc-20160816; b=u+h/VG4UNg0Jmr8MpmPtx+/VsMxFjwDEmmsskSXtsfvdgX3xm3jEWR/XLNXO6P1Wk8 ir4oqsfg7eUJhv5RNwCxr5yTgh79E1a/hwXxG4KRkPXK4JISMSJtbbYBZfKSrrWONCrb BBK5g+oxsPi3wzgXhu6dXmxilGwVDo4RsdEYcZYozWb8yVfVmXgsOQhWXtzC6PTEixGs j96mTQrzIbe4Ss9+xBlK6o2zWT6RYkAJ5ldnpQfDTWbwfX72Z05MlJjguMRwuRMwRnid cuNcK9rVXcrYdFSZXpgpVR0xr+t4uI012DG6E/cm7JjjfaSs6Yq2/Lq8BRt+1vsMS/es yFYQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-unsubscribe:list-subscribe:list-id:precedence:message-id:date :subject:cc:to:from:dkim-signature; bh=Gt9Q+IJNqaWn6bDtwa6xbdLpVnnlshheEMUJfkcGCNQ=; fh=YeBJWoazz4TtFUBO0ZD3vbUbLwPwkC3XK7CDlbnPsvY=; b=q0kmB2skbx3hNfD3770/pwKIZ6uAaW6H1tYAbLzaYv2v4qGd11PRkPLgieLjgnpUAe HRL63j4GmlkccLYrubeyYttJIt8m9kOrMECYq83svePud/M+vYIYbKokqsX3M4MXkzSY XARxVBwbvNYUHQb10T0enwP8+kvYVSKO3XpX8d391Xkxpg7qgFvHV9ueROyj7L7CDhDE mXEh5u3rAqkplsn+1HGF3QYVYkN59uH3M0zgXJcV+tHHXu73UFpmHDuzOx9lyfb/rAQ8 EusChouraiQkbu9XYxI4BsxXdcRRLllXdcqp/uAzki1CLLv2rbsOd8jKAf/rfMIKTRb4 dfRg==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@quicinc.com header.s=qcppdkim1 header.b=aCXaJnUo; arc=pass (i=1 spf=pass spfdomain=qualcomm.com dkim=pass dkdomain=quicinc.com dmarc=pass fromdomain=quicinc.com); spf=pass (google.com: domain of selinux-refpolicy+bounces-23-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) smtp.mailfrom="selinux-refpolicy+bounces-23-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=quicinc.com Return-Path: Received: from sv.mirrors.kernel.org (sv.mirrors.kernel.org. [139.178.88.99]) by mx.google.com with ESMTPS id 98e67ed59e1d1-2bf5fe35a40si10015327a91.119.2024.05.29.06.11.01 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 29 May 2024 06:11:01 -0700 (PDT) Received-SPF: pass (google.com: domain of selinux-refpolicy+bounces-23-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) client-ip=139.178.88.99; Authentication-Results: mx.google.com; dkim=pass header.i=@quicinc.com header.s=qcppdkim1 header.b=aCXaJnUo; arc=pass (i=1 spf=pass spfdomain=qualcomm.com dkim=pass dkdomain=quicinc.com dmarc=pass fromdomain=quicinc.com); spf=pass (google.com: domain of selinux-refpolicy+bounces-23-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) smtp.mailfrom="selinux-refpolicy+bounces-23-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=quicinc.com Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by sv.mirrors.kernel.org (Postfix) with ESMTPS id 8EF1228A485 for ; Wed, 29 May 2024 13:08:52 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 2B157819; Wed, 29 May 2024 13:08:51 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=quicinc.com header.i=@quicinc.com header.b="aCXaJnUo" X-Original-To: selinux-refpolicy@vger.kernel.org Received: from mx0a-0031df01.pphosted.com (mx0a-0031df01.pphosted.com [205.220.168.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3E483DDA3 for ; Wed, 29 May 2024 13:08:48 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=205.220.168.131 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716988131; cv=none; b=klHNVyNLEgiClBySuVGau+/EcwfY89EFec6Id+QwJ+Nq0jltr3NHgJMKZpL8XY/3vB+dXTP34qQWdM9Ads5jriTiuuCRoz4o+FZVKblmGTVR5aLtfAbdeBQDpfBuQodp1vEPVRqr64N3MFjS4qths8oI7y/qR8qR6AuP29Esr5A= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716988131; c=relaxed/simple; bh=5Xax1btBpa8CGtI++JzSbblGglljHZ1OuGsKEy13EUA=; h=From:To:Cc:Subject:Date:Message-Id; b=PDbRCQmnkHQVAYSXTajk0fagpFAlp6oa94o4wbVR8EWLaBElz/IljkixFAFmTI6iyUuEoDxDqa8EcT+kCpQcYm41DIpo7WmmEvpLZSY37oNWcpgoWWe8gvhsRXYdT+WfgZM8TdLgJdlYnwy6MR0oyiBjMFdU04f2vQPRVSN37g0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=quicinc.com; spf=pass smtp.mailfrom=qualcomm.com; dkim=pass (2048-bit key) header.d=quicinc.com header.i=@quicinc.com header.b=aCXaJnUo; arc=none smtp.client-ip=205.220.168.131 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=quicinc.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qualcomm.com Received: from pps.filterd (m0279865.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 44T7MId9015684 for ; Wed, 29 May 2024 13:08:46 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=quicinc.com; h= cc:date:from:message-id:subject:to; s=qcppdkim1; bh=Gt9Q+IJNqaWn 6bDtwa6xbdLpVnnlshheEMUJfkcGCNQ=; b=aCXaJnUo5YchHZh8k4s1loNMGcL9 UfMp1jVnthDM9XnEBC5OEq90Ga9yrN051vXIAZART54YuRBWzWWT//xxHpOMLPiW cNmic5x6j+/iZC8IDI8SIzjDkZJColvtf5Me1QzW/gl9I2lcs28kUKjp+ZzxCwLY +SIa/L3pzmzI4+lS55VnfuJ1qSzsnliz6tGUBsrcfGzmK0aEyo9V7VXT+0KOs4sz EZtRiYleg0vlgFfrE8KxLpygG5t6wM4Zf0zG3S8oPZ5+dETrNH7brCIiS2AaXBug rU8KXMaR/uv0xcj1xEQRImY0ejA+cAkqoqp1tkk6PQIDcfir3YPEsgUZzw== Received: from apblrppmta02.qualcomm.com (blr-bdr-fw-01_GlobalNAT_AllZones-Outside.qualcomm.com [103.229.18.19]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 3ydyws0p48-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 29 May 2024 13:08:45 +0000 (GMT) Received: from pps.filterd (APBLRPPMTA02.qualcomm.com [127.0.0.1]) by APBLRPPMTA02.qualcomm.com (8.17.1.5/8.17.1.5) with ESMTP id 44TD8fBG014545 for ; Wed, 29 May 2024 13:08:41 GMT Received: from pps.reinject (localhost [127.0.0.1]) by APBLRPPMTA02.qualcomm.com (PPS) with ESMTP id 3yb92kjpwg-1 for ; Wed, 29 May 2024 13:08:41 +0000 Received: from APBLRPPMTA02.qualcomm.com (APBLRPPMTA02.qualcomm.com [127.0.0.1]) by pps.reinject (8.17.1.5/8.17.1.5) with ESMTP id 44TD8fOt014540 for ; Wed, 29 May 2024 13:08:41 GMT Received: from hu-maiyas-hyd.qualcomm.com (hu-amisjain-hyd.qualcomm.com [10.213.106.114]) by APBLRPPMTA02.qualcomm.com (PPS) with ESMTP id 44TD8e3t014537; Wed, 29 May 2024 13:08:41 +0000 Received: by hu-maiyas-hyd.qualcomm.com (Postfix, from userid 2365909) id C4C565000A8; Wed, 29 May 2024 18:38:39 +0530 (+0530) From: Amisha Jain To: selinux-refpolicy@vger.kernel.org Cc: quic_mohamull@quicinc.com, quic_hbandi@quicinc.com, quic_anubhavg@quicinc.com, Amisha Jain Subject: [PATCH v1] Sepolicy changes for bluez to access uhid Date: Wed, 29 May 2024 18:38:14 +0530 Message-Id: <20240529130814.13423-1-quic_amisjain@quicinc.com> X-Mailer: git-send-email 2.17.1 X-QCInternal: smtphost X-QCInternal: smtphost X-Proofpoint-Virus-Version: vendor=nai engine=6200 definitions=5800 signatures=585085 X-Proofpoint-Virus-Version: vendor=nai engine=6200 definitions=5800 signatures=585085 X-Proofpoint-ORIG-GUID: 7nVeI0TTZloyEg3JbcfBwXngWfBDXJ0- X-Proofpoint-GUID: 7nVeI0TTZloyEg3JbcfBwXngWfBDXJ0- X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.650,FMLib:17.12.28.16 definitions=2024-05-29_10,2024-05-28_01,2024-05-17_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 adultscore=0 phishscore=0 malwarescore=0 impostorscore=0 suspectscore=0 mlxscore=0 mlxlogscore=676 priorityscore=1501 spamscore=0 lowpriorityscore=0 bulkscore=0 clxscore=1011 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2405170001 definitions=main-2405290089 Precedence: bulk X-Mailing-List: selinux-refpolicy@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Resolve selinux premission for HID Below avc denials that are fixed with this patch - avc: denied { read write } for pid=656 comm="bluetoothd" name="uhid" dev="devtmpfs" ino=841 scontext=system_u:system_r:bluetooth_t:s0-s15:c0.c1023 tcontext=system_u:object_r:uhid_device_t:s0 tclass=chr_file permissive=0 Signed-off-by: Amisha Jain --- policy/modules/services/bluetooth.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/services/bluetooth.te b/policy/modules/services/bluetooth.te index f23a979de..b2d6a9685 100644 --- a/policy/modules/services/bluetooth.te +++ b/policy/modules/services/bluetooth.te @@ -104,6 +104,7 @@ dev_rw_generic_usb_dev(bluetooth_t) dev_read_urand(bluetooth_t) dev_rw_input_dev(bluetooth_t) dev_rw_wireless(bluetooth_t) +uhid_device_rw(bluetooth_t) domain_use_interactive_fds(bluetooth_t) domain_dontaudit_search_all_domains_state(bluetooth_t) -- 2.17.1