New issue
Advanced search Search tips

Issue 674869 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 2
Type: Bug



Sign in to add a comment

SE Linux Violation AVC Denial in sandboxed process

Reported by somcs...@gmail.com, Dec 16 2016

Issue description

Steps to reproduce the problem:
1. Open Chrome and open new tabs and do some search.
2. Check the logs

What is the expected behavior?
There should not be any Security violation from the app in accessing restricted paths.

What went wrong?
chrome accessing tmp path when new tab is opened, which results in AVC denial.

Did this work before? N/A 

Chrome version: 55.0.28883.91  Channel: stable
OS Version: 7.0
Flash Version:
 
avcdenial.txt
21.2 KB View Download
Owner: tedc...@chromium.org
Status: Assigned (was: Unconfirmed)
Cc: tedc...@chromium.org
Components: Security
Owner: ----
Status: Available (was: Assigned)
I don't know how actionable this is, nor am I familiar with SE linux on Android, so this is better handled/triaged by security.

Do you know if this still repros with newer versions of Chrome?

https://source.android.com/security/selinux/validate

12-16 16:39:45.446  1835  1835 W dboxed_process0: type=1400 audit(0.0:177): avc: denied { getattr } for path="/data/data/com.android.chrome" dev="dm-2" ino=376175 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c512,c768 tclass=dir permissive=0
Project Member

Comment 3 by sheriffbot@chromium.org, Nov 2

Labels: Hotlist-Recharge-Cold
Status: Untriaged (was: Available)
This issue has been Available for over a year. If it's no longer important or seems unlikely to be fixed, please consider closing it out. If it is important, please re-triage the issue.

Sorry for the inconvenience if the bug really should have been left as Available.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment