How to get avc logging ( selinux ) in Android working?
1
vote
0
answers
457
views
I am on Android 10. Whether I
setenforce 0 or 1-
I cannot get avc ( aka SeLinux )
errors logged. I checked ramoops
files also and its ditto.
root@m20lte:/ # setenforce 1
root@m20lte:/ # grep -i avc /proc/kmsg
[358888.761197] [3: servicemanager: 3452] avc: received setenforce notice (enforcing=1)
[358890.709988] [2: init: 1] avc: received setenforce notice (enforcing=1)
[358901.864803] [0:hwservicemanage: 3453] avc: received setenforce notice (enforcing=1)
^C
root@m20lte:/ # logcat -d | grep -i "avc"
07-14 08:31:21.858 3452 3452 E audit : avc: received setenforce notice (enforcing=1)
07-14 08:31:23.806 1 1 E audit : avc: received setenforce notice (enforcing=1)
07-14 08:31:34.962 3453 3453 E audit : avc: received setenforce notice (enforcing=1)
I'd like to understand avc denials
that are supposed to be logged when setenforce 0
is on so I can understand what changes to make to sePolicy
to get my exceptions incorporated . Is that going to be any easy ride or a long shot ? In the above box , besides just setenforce
notice it should have logged in a bunch of messages as I ran various apps that would trigger avc
exceptions
Asked by user1874594
(527 rep)
Jul 14, 2023, 03:15 AM