Develop Reference

anyone with a solution to this error, type=1400 audit: avc: denied { read write }

My Android application is saving data on SQLite and working fine on various android versions, but when installed from playstore some users cannot use the application, after debugging I get this error
type=1400 audit: avc: denied { read write }
I have added permissions for WRITE EXTERNAL STORAGE, READ EXTERNAL STORAGE but has not solved

Flutter missed permission? what is permission name?

I had an app with flutter. the log bellow, I saw error is miss permission but I didn't find it. Do you know it? please help me. I registered WRITE_EXTERNAL_STORAGE and READ_EXTERNAL_STORAGE in androidMainifest.xml file.
/zygote64(28918): Do partial code cache collection, code=60KB, data=45KB I/zygote64(28918): After code cache collection, code=60KB, data=45KB I/zygote64(28918): Increasing code cache capacity to 256KB E/libc (28918): Access denied finding property "persist.camera.cfa.packagelist" W/data_extraction(28918): type=1400 audit(0.0:204): avc: denied { read } for name="u:object_r:camera_prop:s0" dev="tmpfs" ino=6716 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:camera_prop:s0 tclass=file permissive=0 ppid=3602 pcomm="main" pgid=3602 pgcomm="main"

did you use the device camera?
try add this to your AndroidManifest <uses-permission android:name="android.permission.CAMERA" />

LogCat - E/SELinux: avc: denied { find }

LogCat shows me this message every second
Any ideas on how to repair this error?
2021-01-17 17:41:08.905 174-174/? E/SELinux: avc: denied { find } for pid=25449 uid=2000 name=car_service scontext=u:r:shell:s0 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=0
2021-01-17 17:41:09.903 174-174/? E/SELinux: avc: denied { find } for pid=25455 uid=2000 name=car_service scontext=u:r:shell:s0 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=0

This is a SELinux denial. You can ignore it as it won't affect your app. There isn't anything you can do about it (at a user level).
If you are using a custom ROM, the maintainer needs to update their sepolicy.
If you are the maintainer, there are detailed guides on how to understand the denials and write the appropriate the rules for them. One such guide is https://msfjarvis.dev/posts/understanding-and-resolving-selinux-denials-on-android/
If you have any specific doubts in writing the correct rule for this, you can update the question

I had a lot of such errors on my Realme 8i with Android 11 (on a stock firmare) but for another name - tethering:
2023-01-01 15:34:33.134 501 501 system E SELinux : avc: denied { find } for pid=22576
uid=10219 name=tethering scontext=u:r:permissioncontroller_app:s0:c219,c256,c512,c768
tcontext=u:object_r:tethering_service:s0 tclass=service_manager permissive=0
Disabling Tethering hardware acceleration in Developer options immediately stopped such spam.

Access denied finding property "acodec.video.buflogging" on HMD Global phones

I am using INDExOS/media-for-mobile for ovelaying video in my android app.
It is working fine at Motorola, Samsung, Nexus and Pixel Devices. But I am getting following error in case of HMD Global(Nokia) Devices,
Access denied finding property "acodec.video.buflogging"
W/MediaCodec_loop: type=1400 audit(0.0:2659): avc: denied { read } for name="u:object_r:mtk_em_video_log_acodec_prop:s0" dev="tmpfs" ino=6644 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:mtk_em_video_log_acodec_prop:s0 tclass=file permissive=0
Any help will be appreciated.

Permission denied error when opening /proc/<PID>/stat file

I wrote a daemon, running as system.
When it tries to open some /proc//stat entry of process PID which using its library, I get this error of SELinux:
type=1400 audit(1464247244.561:530): avc: denied { search } for pid=22968 comm="Binder_3" name="22899" dev="proc" ino=71342 scontext=u:r:system_app:s0 tcontext=u:r:untrusted_app:s0:c512,c768 tclass=dir permissive=0
Do I miss some “allow” rule to my daemon?
The error seems unrelated to it (as if ‘system_app’ domain lack permissions, and not my daemon).
How can I fix it?

You should execute
adb shell ps -eZ | grep 22968
command to find the problematic service or app from command line as your app running at the same time. After you find the victim(app) you have to add /external/sepolicy/service_contexts file a SELinux rule for handling the access violation.