Android 11 添加Service服务SELinux问题

简介: Android 11 添加Service服务SELinux问题
 SELinux : avc:  denied  { add } for pid=1018 uid=1000 name=dmtseic scontext=u:r:system_server:s0 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=0
 System  : ******************************************
 System  : ************ Failure starting core service
 System  : ******************************************
 System  : ************ Failure starting system services
 System  : java.lang.SecurityException: 
 System  :  at android.os.Parcel.createExceptionOrNull(Parcel.java:2373)
 System  :  at android.os.Parcel.createException(Parcel.java:2357)
 System  :  at android.os.Parcel.readException(Parcel.java:2340)
 System  :  at android.os.Parcel.readException(Parcel.java:2282)
 System  :  at android.os.IServiceManager$Stub$Proxy.addService(IServiceManager.java:380)
 System  :  at android.os.ServiceManagerProxy.addService(ServiceManagerNative.java:72)
 System  :  at android.os.ServiceManager.addService(ServiceManager.java:197)
 System  :  at android.os.ServiceManager.addService(ServiceManager.java:166)
 System  :  at com.android.server.SystemServer.startOtherServices(SystemServer.java:1175)
 System  :  at com.android.server.SystemServer.run(SystemServer.java:623)
 System  :  at com.android.server.SystemServer.main(SystemServer.java:429)
 System  :  at java.lang.reflect.Method.invoke(Native Method)
 System  :  at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:612)
 System  :  at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:975)
问题1:
FAILED: build out/target/product/projectName/obj/FAKE/treble_sepolicy_tests_26.0_intermediates/treble_sepolicy_tests_26.0
Outputs: out/target/product/projectName/obj/FAKE/treble_sepolicy_tests_26.0_intermediates/treble_sepolicy_tests_26.0
Error: exited with code: 1
Command: /bin/bash -c "(out/host/linux-x86/bin/treble_sepolicy_tests -l     out/host/linux-x86/lib64/libsepolwrap.so  -f out/target/product/projectName/system/etc/selinux/plat_file_contexts  -f out/target/product/projectName/vendor/etc/selinux/vendor_file_contexts  -f out/target/product/projectName/system/system_ext/etc/selinux/system_ext_file_contexts    -b out/target/product/projectName/obj/ETC/built_plat_sepolicy_intermediates/built_plat_sepolicy -m out/target/product/projectName/obj/FAKE/treble_sepolicy_tests_26.0_intermediates/26.0_mapping.combined.cil     -o out/target/product/projectName/obj/FAKE/treble_sepolicy_tests_26.0_intermediates/built_26.0_plat_sepolicy -p out/target/product/projectName/obj/ETC/sepolicy_intermediates/sepolicy    -u out/target/product/projectName/obj/ETC/built_plat_sepolicy_intermediates/base_plat_pub_policy.cil ) && (touch out/target/product/projectName/obj/FAKE/treble_sepolicy_tests_26.0_intermediates/treble_sepolicy_tests_26.0 )"
Output:
SELinux: The following public types were found added to the policy without an entry into the compatibility mapping file(s) found in private/compat/V.v/V.v[.ignore].cil, where V.v is the latest API level.
external_dmtseic_service hal_dmtseic_service
 
问题2:
FAILED: build out/target/product/projectName/obj/FAKE/sepolicy_freeze_test_intermediates/sepolicy_freeze_test
Outputs: out/target/product/projectName/obj/FAKE/sepolicy_freeze_test_intermediates/sepolicy_freeze_test
Error: exited with code: 1
Command: /bin/bash -c "(diff -rq -x bug_map system/sepolicy/prebuilts/api/30.0/public system/sepolicy/public ) && (diff -rq -x bug_map system/sepolicy/prebuilts/api/30.0/private system/sepolicy/private ) && (touch out/target/product/projectName/obj/FAKE/sepolicy_freeze_test_intermediates/sepolicy_freeze_test )"
Output:
文件 system/sepolicy/prebuilts/api/30.0/public/service.te 和 system/sepolicy/public/service.te 不同
 
问题3:
FAILED: build out/target/product/projectName/obj/FAKE/treble_sepolicy_tests_26.0_intermediates/26.0_compat
Outputs: out/target/product/projectName/obj/FAKE/treble_sepolicy_tests_26.0_intermediates/26.0_compat
Error: exited with code: 1
Command: /bin/bash -c "out/host/linux-x86/bin/secilc -m -M true -G -N -c 30     out/target/product/projectName/obj/ETC/plat_sepolicy.cil_intermediates/plat_sepolicy.cil out/target/product/projectName/obj/ETC/plat_26.0.cil_intermediates/plat_26.0.cil system/sepolicy/prebuilts/api/26.0/nonplat_sepolicy.cil -o out/target/product/projectName/obj/FAKE/treble_sepolicy_tests_26.0_intermediates/26.0_compat -f /dev/null"
Output:
Failed to resolve typeattributeset statement at out/target/product/projectName/obj/ETC/plat_26.0.cil_intermediates/plat_26.0.cil:187
Failed to compile cildb: -2
  修改:         system/sepolicy/prebuilts/api/26.0/nonplat_sepolicy.cil
  修改:         system/sepolicy/prebuilts/api/26.0/private/service_contexts
  修改:         system/sepolicy/prebuilts/api/26.0/public/service.te
  修改:         system/sepolicy/prebuilts/api/27.0/nonplat_sepolicy.cil
  新文件:       system/sepolicy/prebuilts/api/27.0/private/.service_contexts.swp
  修改:         system/sepolicy/prebuilts/api/27.0/private/compat/26.0/26.0.cil
  修改:         system/sepolicy/prebuilts/api/27.0/private/service_contexts
  修改:         system/sepolicy/prebuilts/api/27.0/public/service.te
  修改:         system/sepolicy/prebuilts/api/28.0/plat_pub_versioned.cil
  修改:         system/sepolicy/prebuilts/api/28.0/private/compat/26.0/26.0.cil
  修改:         system/sepolicy/prebuilts/api/28.0/private/compat/27.0/27.0.cil
  修改:         system/sepolicy/prebuilts/api/28.0/private/service_contexts
  修改:         system/sepolicy/prebuilts/api/28.0/public/service.te
  修改:         system/sepolicy/prebuilts/api/29.0/plat_pub_versioned.cil
  修改:         system/sepolicy/prebuilts/api/29.0/private/compat/26.0/26.0.cil
  修改:         system/sepolicy/prebuilts/api/29.0/private/compat/27.0/27.0.cil
  修改:         system/sepolicy/prebuilts/api/29.0/private/compat/28.0/28.0.cil
  修改:         system/sepolicy/prebuilts/api/29.0/private/compat/28.0/28.0.ignore.cil
  修改:         system/sepolicy/prebuilts/api/29.0/private/service_contexts
  修改:         system/sepolicy/prebuilts/api/29.0/public/service.te
  修改:         system/sepolicy/prebuilts/api/30.0/private/compat/26.0/26.0.cil
  修改:         system/sepolicy/prebuilts/api/30.0/private/compat/27.0/27.0.cil
  修改:         system/sepolicy/prebuilts/api/30.0/private/compat/28.0/28.0.cil
  修改:         system/sepolicy/prebuilts/api/30.0/private/compat/28.0/28.0.ignore.cil
  修改:         system/sepolicy/prebuilts/api/30.0/private/compat/29.0/29.0.cil
  修改:         system/sepolicy/prebuilts/api/30.0/private/service_contexts
  修改:         system/sepolicy/prebuilts/api/30.0/public/service.te
  修改:         system/sepolicy/private/compat/26.0/26.0.cil
  修改:         system/sepolicy/private/compat/27.0/27.0.cil
  修改:         system/sepolicy/private/compat/28.0/28.0.cil
  修改:         system/sepolicy/private/compat/28.0/28.0.ignore.cil
  修改:         system/sepolicy/private/compat/29.0/29.0.cil
  修改:         system/sepolicy/private/service_contexts
  修改:         system/sepolicy/public/service.te
相关文章
|
1月前
|
Java API 调度
Android系统 自定义开机广播,禁止后台服务,运行手动安装应用接收开机广播
Android系统 自定义开机广播,禁止后台服务,运行手动安装应用接收开机广播
77 0
|
20天前
|
调度 Android开发
43. 【Android教程】服务:Service
43. 【Android教程】服务:Service
18 2
|
1月前
|
Android开发
Android Service Call /dev/xxx SELinux
Android Service Call /dev/xxx SELinux
33 1
|
7天前
|
存储 监控 调度
Android系统服务:WMS、AMS相关知识
参考文献 Android窗口管理服务WindowManagerService计算Activity窗口大小的过程分析 Android窗口管理服务WindowManagerService显示Activity组件的启动窗口(Starting Window)的过程分析 Android窗口管理服务WindowManagerService对输入法窗口(Input Method Window)的管理分析 Android窗口管理服务WindowManagerService显示窗口动画的原理分析
|
1月前
|
存储 监控 Java
Android Service之设备存储空间监控 DeviceStorageMonitorService
Android Service之设备存储空间监控 DeviceStorageMonitorService
35 2
|
1月前
|
Android开发 数据库管理
Android如何在Activity和Service之间传递数据
Android如何在Activity和Service之间传递数据
27 3
|
1月前
|
Android开发
Android Service的两种使用方法
Android Service的两种使用方法
25 2
|
1月前
|
Shell Android开发
android Selinux 之 platform
android Selinux 之 platform
18 0
|
1月前
|
编解码 缓存 安全
Android SELinux 参数语法介绍及基础分析
Android SELinux 参数语法介绍及基础分析
36 0
|
1月前
|
安全 网络安全 Android开发
云端防御策略:融合云服务与网络安全的未来构建高效的Android应用:从内存优化到电池寿命
【4月更文挑战第30天】 随着企业加速向云计算环境转移,数据和服务的云端托管成为常态。本文探讨了在动态且复杂的云服务场景下,如何构建和实施有效的网络安全措施来保障信息资产的安全。我们将分析云计算中存在的安全挑战,并展示通过多层次、多维度的安全框架来提升整体防护能力的方法。重点关注包括数据加密、身份认证、访问控制以及威胁检测与响应等关键技术的实践应用,旨在为读者提供一种结合最新技术进展的网络安全策略视角。 【4月更文挑战第30天】 在竞争激烈的移动市场中,Android应用的性能和资源管理已成为区分优秀与平庸的关键因素。本文深入探讨了提升Android应用效率的多个方面,包括内存优化策略、电池