audit2allow Tool

透過linux上的audit2allow工具來幫忙填寫，步驟如下:

挑出logcat中的avc資訊，轉存文字檔

透過command就可以幫你整理出來

avc.log

10-22 21:55:33.072 2353 2353 E SELinux : avc: denied { find } for interface=android.hardware.health::IHealth sid=u:r:emmclifereader:s0 pid=2924 scontext=u:r:emmclifereader:s0 tcontext=u:object_r:hal_health_hwservice:s0 tclass=hwservice_manager permissive=1

10-22 21:55:33.075 2924 2924 I emmclifereader: type=1400 audit(0.0:27): avc: denied { write } for name="property_service" dev="tmpfs" ino=12079 scontext=u:r:emmclifereader:s0 tcontext=u:object_r:property_socket:s0 tclass=sock_file permissive=1

10-22 21:55:33.075 2924 2924 I emmclifereader: type=1400 audit(0.0:28): avc: denied { connectto } for path="/dev/socket/property_service" scontext=u:r:emmclifereader:s0 tcontext=u:r:init:s0 tclass=unix_stream_socket permissive=1

audit2allow –i avc.log

allow emmclifereader init:unix_stream_socket connectto;

allow emmclifereader property_socket:sock_file write;