{"action":"closed","number":5,"pull_request":{"url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/pulls/5","id":99257450,"html_url":"https://github.com/jhalayashraj/android_system_sepolicy/pull/5","diff_url":"https://github.com/jhalayashraj/android_system_sepolicy/pull/5.diff","patch_url":"https://github.com/jhalayashraj/android_system_sepolicy/pull/5.patch","issue_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/issues/5","number":5,"state":"closed","locked":false,"title":"fix denials for rootfs:lnk_file","user":{"login":"jhalayashraj","id":20107466,"avatar_url":"https://avatars.githubusercontent.com/u/20107466?v=3","gravatar_id":"","url":"https://api.github.com/users/jhalayashraj","html_url":"https://github.com/jhalayashraj","followers_url":"https://api.github.com/users/jhalayashraj/followers","following_url":"https://api.github.com/users/jhalayashraj/following{/other_user}","gists_url":"https://api.github.com/users/jhalayashraj/gists{/gist_id}","starred_url":"https://api.github.com/users/jhalayashraj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jhalayashraj/subscriptions","organizations_url":"https://api.github.com/users/jhalayashraj/orgs","repos_url":"https://api.github.com/users/jhalayashraj/repos","events_url":"https://api.github.com/users/jhalayashraj/events{/privacy}","received_events_url":"https://api.github.com/users/jhalayashraj/received_events","type":"User","site_admin":false},"body":"Since android-7.1.1 I'm seeing denials for any domain accessing the\r\n/vendor symlink.  Apparently related to getattr.  Not sure which\r\ncommit caused the denials, but we are probably ok allowing getattr\r\non rootfs:lnk_file.  The commit adds it.\r\n\r\nsample dmesg lines:\r\ntype=1400 audit(1481572084.260:4): avc: denied { getattr } for pid=294 comm=\"sysinit\" path=\"/vendor\" dev=\"rootfs\" ino=5603 scontext=u:r:sysinit:s0 tcontext=u:object_r:rootfs:s0 tclass=lnk_file permissive=0\r\ntype=1400 audit(1481572084.680:5): avc: denied { getattr } for pid=379 comm=\"90userinit\" path=\"/vendor\" dev=\"rootfs\" ino=5603 scontext=u:r:sysinit:s0 tcontext=u:object_r:rootfs:s0 tclass=lnk_file permissive=0\r\ntype=1400 audit(1481572084.860:6): avc: denied { getattr } for pid=493 comm=\"wan_start\" path=\"/vendor\" dev=\"rootfs\" ino=5603 scontext=u:r:startril:s0 tcontext=u:object_r:rootfs:s0 tclass=lnk_file permissive=0\r\ntype=1400 audit(1481572084.890:7): avc: denied { getattr } for pid=506 comm=\"audioserver\" path=\"/vendor\" dev=\"rootfs\" ino=5603 scontext=u:r:audioserver:s0 tcontext=u:object_r:rootfs:s0 tclass=lnk_file permissive=0\r\ntype=1400 audit(1481572084.900:8): avc: denied { getattr } for pid=510 comm=\"mediacodec\" path=\"/vendor\" dev=\"rootfs\" ino=5603 scontext=u:r:mediacodec:s0 tcontext=u:object_r:rootfs:s0 tclass=lnk_file permissive=0\r\ntype=1400 audit(1481572084.970:9): avc: denied { getattr } for pid=511 comm=\"mediadrmserver\" path=\"/vendor\" dev=\"rootfs\" ino=5603 scontext=u:r:mediadrmserver:s0 tcontext=u:object_r:rootfs:s0 tclass=lnk_file permissive=0\r\ntype=1400 audit(1481572085.070:10): avc: denied { getattr } for pid=543 comm=\"ath6kl-service\" path=\"/vendor\" dev=\"rootfs\" ino=5603 scontext=u:r:ath6kl-service:s0 tcontext=u:object_r:rootfs:s0 tclass=lnk_file permissive=0\r\ntype=1400 audit(1481572084.770:11): avc: denied { getattr } for pid=829 comm=\"bootanimation\" path=\"/vendor\" dev=\"rootfs\" ino=5603 scontext=u:r:bootanim:s0 tcontext=u:object_r:rootfs:s0 tclass=lnk_file permissive=0\r\n\r\nChange-Id: Icfafadf18cbe29e3ca0316149d97e6ea24274941","created_at":"2016-12-23T15:58:43Z","updated_at":"2016-12-23T15:58:49Z","closed_at":"2016-12-23T15:58:49Z","merged_at":"2016-12-23T15:58:49Z","merge_commit_sha":"b394f21d6cbb91946c3c03a8e58b1a3f560f3dd8","assignee":null,"assignees":[],"milestone":null,"commits_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/pulls/5/commits","review_comments_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/pulls/5/comments","review_comment_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/pulls/comments{/number}","comments_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/issues/5/comments","statuses_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/statuses/41ae668d0be9dfde72a25f00e9f3b74c9339386c","head":{"label":"CyanogenMod:cm-14.1","ref":"cm-14.1","sha":"41ae668d0be9dfde72a25f00e9f3b74c9339386c","user":{"login":"CyanogenMod","id":317721,"avatar_url":"https://avatars.githubusercontent.com/u/317721?v=3","gravatar_id":"","url":"https://api.github.com/users/CyanogenMod","html_url":"https://github.com/CyanogenMod","followers_url":"https://api.github.com/users/CyanogenMod/followers","following_url":"https://api.github.com/users/CyanogenMod/following{/other_user}","gists_url":"https://api.github.com/users/CyanogenMod/gists{/gist_id}","starred_url":"https://api.github.com/users/CyanogenMod/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CyanogenMod/subscriptions","organizations_url":"https://api.github.com/users/CyanogenMod/orgs","repos_url":"https://api.github.com/users/CyanogenMod/repos","events_url":"https://api.github.com/users/CyanogenMod/events{/privacy}","received_events_url":"https://api.github.com/users/CyanogenMod/received_events","type":"Organization","site_admin":false},"repo":{"id":66642684,"name":"android_system_sepolicy","full_name":"CyanogenMod/android_system_sepolicy","owner":{"login":"CyanogenMod","id":317721,"avatar_url":"https://avatars.githubusercontent.com/u/317721?v=3","gravatar_id":"","url":"https://api.github.com/users/CyanogenMod","html_url":"https://github.com/CyanogenMod","followers_url":"https://api.github.com/users/CyanogenMod/followers","following_url":"https://api.github.com/users/CyanogenMod/following{/other_user}","gists_url":"https://api.github.com/users/CyanogenMod/gists{/gist_id}","starred_url":"https://api.github.com/users/CyanogenMod/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CyanogenMod/subscriptions","organizations_url":"https://api.github.com/users/CyanogenMod/orgs","repos_url":"https://api.github.com/users/CyanogenMod/repos","events_url":"https://api.github.com/users/CyanogenMod/events{/privacy}","received_events_url":"https://api.github.com/users/CyanogenMod/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/CyanogenMod/android_system_sepolicy","description":null,"fork":false,"url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy","forks_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/forks","keys_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/keys{/key_id}","collaborators_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/teams","hooks_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/hooks","issue_events_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/issues/events{/number}","events_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/events","assignees_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/assignees{/user}","branches_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/branches{/branch}","tags_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/tags","blobs_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/git/refs{/sha}","trees_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/git/trees{/sha}","statuses_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/statuses/{sha}","languages_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/languages","stargazers_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/stargazers","contributors_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/contributors","subscribers_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/subscribers","subscription_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/subscription","commits_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/commits{/sha}","git_commits_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/git/commits{/sha}","comments_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/comments{/number}","issue_comment_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/issues/comments{/number}","contents_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/contents/{+path}","compare_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/compare/{base}...{head}","merges_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/merges","archive_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/downloads","issues_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/issues{/number}","pulls_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/pulls{/number}","milestones_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/milestones{/number}","notifications_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/labels{/name}","releases_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/releases{/id}","deployments_url":"https://api.github.com/repos/CyanogenMod/android_system_sepolicy/deployments","created_at":"2016-08-26T11:31:35Z","updated_at":"2016-12-10T18:21:30Z","pushed_at":"2016-12-21T15:22:49Z","git_url":"git://github.com/CyanogenMod/android_system_sepolicy.git","ssh_url":"git@github.com:CyanogenMod/android_system_sepolicy.git","clone_url":"https://github.com/CyanogenMod/android_system_sepolicy.git","svn_url":"https://github.com/CyanogenMod/android_system_sepolicy","homepage":null,"size":3805,"stargazers_count":3,"watchers_count":3,"language":"Makefile","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":44,"mirror_url":null,"open_issues_count":0,"forks":44,"open_issues":0,"watchers":3,"default_branch":"cm-14.1"}},"base":{"label":"jhalayashraj:cm-14.1","ref":"cm-14.1","sha":"be1509a07aad77b59a9c9921b6a2d3612b2bb952","user":{"login":"jhalayashraj","id":20107466,"avatar_url":"https://avatars.githubusercontent.com/u/20107466?v=3","gravatar_id":"","url":"https://api.github.com/users/jhalayashraj","html_url":"https://github.com/jhalayashraj","followers_url":"https://api.github.com/users/jhalayashraj/followers","following_url":"https://api.github.com/users/jhalayashraj/following{/other_user}","gists_url":"https://api.github.com/users/jhalayashraj/gists{/gist_id}","starred_url":"https://api.github.com/users/jhalayashraj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jhalayashraj/subscriptions","organizations_url":"https://api.github.com/users/jhalayashraj/orgs","repos_url":"https://api.github.com/users/jhalayashraj/repos","events_url":"https://api.github.com/users/jhalayashraj/events{/privacy}","received_events_url":"https://api.github.com/users/jhalayashraj/received_events","type":"User","site_admin":false},"repo":{"id":72627879,"name":"android_system_sepolicy","full_name":"jhalayashraj/android_system_sepolicy","owner":{"login":"jhalayashraj","id":20107466,"avatar_url":"https://avatars.githubusercontent.com/u/20107466?v=3","gravatar_id":"","url":"https://api.github.com/users/jhalayashraj","html_url":"https://github.com/jhalayashraj","followers_url":"https://api.github.com/users/jhalayashraj/followers","following_url":"https://api.github.com/users/jhalayashraj/following{/other_user}","gists_url":"https://api.github.com/users/jhalayashraj/gists{/gist_id}","starred_url":"https://api.github.com/users/jhalayashraj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jhalayashraj/subscriptions","organizations_url":"https://api.github.com/users/jhalayashraj/orgs","repos_url":"https://api.github.com/users/jhalayashraj/repos","events_url":"https://api.github.com/users/jhalayashraj/events{/privacy}","received_events_url":"https://api.github.com/users/jhalayashraj/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/jhalayashraj/android_system_sepolicy","description":null,"fork":true,"url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy","forks_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/forks","keys_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/keys{/key_id}","collaborators_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/teams","hooks_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/hooks","issue_events_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/issues/events{/number}","events_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/events","assignees_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/assignees{/user}","branches_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/branches{/branch}","tags_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/tags","blobs_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/git/refs{/sha}","trees_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/git/trees{/sha}","statuses_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/statuses/{sha}","languages_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/languages","stargazers_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/stargazers","contributors_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/contributors","subscribers_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/subscribers","subscription_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/subscription","commits_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/commits{/sha}","git_commits_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/git/commits{/sha}","comments_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/comments{/number}","issue_comment_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/issues/comments{/number}","contents_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/contents/{+path}","compare_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/compare/{base}...{head}","merges_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/merges","archive_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/downloads","issues_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/issues{/number}","pulls_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/pulls{/number}","milestones_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/milestones{/number}","notifications_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/labels{/name}","releases_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/releases{/id}","deployments_url":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/deployments","created_at":"2016-11-02T10:13:21Z","updated_at":"2016-11-02T10:13:23Z","pushed_at":"2016-12-23T15:58:49Z","git_url":"git://github.com/jhalayashraj/android_system_sepolicy.git","ssh_url":"git@github.com:jhalayashraj/android_system_sepolicy.git","clone_url":"https://github.com/jhalayashraj/android_system_sepolicy.git","svn_url":"https://github.com/jhalayashraj/android_system_sepolicy","homepage":null,"size":3790,"stargazers_count":0,"watchers_count":0,"language":"Makefile","has_issues":false,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"cm-14.1"}},"_links":{"self":{"href":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/pulls/5"},"html":{"href":"https://github.com/jhalayashraj/android_system_sepolicy/pull/5"},"issue":{"href":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/issues/5"},"comments":{"href":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/issues/5/comments"},"review_comments":{"href":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/pulls/5/comments"},"review_comment":{"href":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/pulls/5/commits"},"statuses":{"href":"https://api.github.com/repos/jhalayashraj/android_system_sepolicy/statuses/41ae668d0be9dfde72a25f00e9f3b74c9339386c"}},"merged":true,"mergeable":null,"mergeable_state":"unknown","merged_by":{"login":"jhalayashraj","id":20107466,"avatar_url":"https://avatars.githubusercontent.com/u/20107466?v=3","gravatar_id":"","url":"https://api.github.com/users/jhalayashraj","html_url":"https://github.com/jhalayashraj","followers_url":"https://api.github.com/users/jhalayashraj/followers","following_url":"https://api.github.com/users/jhalayashraj/following{/other_user}","gists_url":"https://api.github.com/users/jhalayashraj/gists{/gist_id}","starred_url":"https://api.github.com/users/jhalayashraj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jhalayashraj/subscriptions","organizations_url":"https://api.github.com/users/jhalayashraj/orgs","repos_url":"https://api.github.com/users/jhalayashraj/repos","events_url":"https://api.github.com/users/jhalayashraj/events{/privacy}","received_events_url":"https://api.github.com/users/jhalayashraj/received_events","type":"User","site_admin":false},"comments":0,"review_comments":0,"commits":1,"additions":1,"deletions":1,"changed_files":1}}
{"actor":{"display_login":"jhalayashraj"}}