Database Users

setools-android with sepolicy-inject

Introduction
In Android 5.0, SELinux is in enforcing mode and sometimes you (or some root application) need to change SELinux policy. There has been only one tool capable of this at runtime - Chainfire's supolicy (part of SuperSU). But this tool is closed source and closed source root apps are great security risk. So I have fixed and enhanced sepolicy-inject from Joshua Brindle and combined it with setools-android by Dmitry Podgorny (pasis) to make it buildable with Android NDK.
Installation instructions
You must have android-ndk installed. Then run:
Code:
git clone https://github.com/xmikos/setools-android.git
cd setools-android
ndk-build
Now you can copy executables from libs/armeabi directory (sepolicy-inject, sesearch and seinfo) to /system/xbin directory on your device.
Usage
Code:
sepolicy-inject -s <source type> -t <target type> -c <class> -p <perm>[,<perm2>,<perm3>,...] [-P <policy file>] [-o <output file>] [-l|--load]
sepolicy-inject -Z type_to_make_permissive [-P <policy file>] [-o <output file>] [-l|--load]
sepolicy-inject -z type_to_make_nonpermissive [-P <policy file>] [-o <output file>] [-l|--load]
For example if you want to allow vdc to write to pseudo-terminal (so you can see replies from vdc command):
Code:
sepolicy-inject -s vdc -t devpts -c chr_file -p read,write -l
Download
Latest binaries for all architectures
Project on GitHub
XDA:DevDB Information
setools-android with sepolicy-inject, Tool/Utility for all devices (see above for details)
Contributors
Mikos, joshua_brindle, Dmitry Podgorny (pasis)
Source Code: https://github.com/xmikos/setools-android
Version Information
Status: Stable
Current Stable Version: 1.3
Stable Release Date: 2017-08-22
Created 2014-12-19
Last Updated 2017-08-22

Mikos,
hi,
i was wondering if you would go further into depth on the command line options,
specifically can i "piggy-back" supolicy onto sepolicy or can you provide a non-generic example of
how to inject say a static su binary with the proper context [seapp_context,file_context,property_context,service_context]
i would be doing this in a debian arm chroot,
the policy is for samsung galaxy tab 4 8.0 sm-t330nu LP 5.1.1 firmware release.
i'm battling apparently selinux AND knox
my current adventure is outlined here..,
http://forum.xda-developers.com/tab-4/general/sm-lp-5-1-1-supersu-t3160110
i have clone your repo and am downloading either ndk or studio.
thanks
m

moonbutt74 said:
Mikos,
i was wondering if you would go further into depth on the command line options,
specifically can i "piggy-back" supolicy onto sepolicy or can you provide a non-generic example of
how to inject say a static su binary with the proper context [seapp_context,file_context,property_context,service_context]
Click to expand...
Click to collapse
Hello, the syntax is simple, if you want comparison with supolicy, here is one example (taken from my SnooperStopper app):
Code:
supolicy --live 'allow vdc init fifo_file {read write getattr}'
is equivalent to:
Code:
sepolicy-inject -s vdc -t init -c fifo_file -p read,write,getattr -l

Mikos,
thanks i got your toolkit built API 19 armeabi-v7a
seinfo is neat.
okay so i am a bit of a dumb dumb, would be up for jumping in on my thread and helping out.
the problem with supersu seems to be at app_process -> /system/xbin/daemonsu
Code:
F/appproc ( 305): Error changing dalvik-cache ownership : Permission denied
F/libc ( 305): Fatal signal 6 (SIGABRT), code -6 in tid 305 (app_process32_o)
and that's where i'm stuck,
also how do i build these tools fully static if possible ? the deb arm chroot doesn't seem to like them
thanks
m

I have released version 1.1 (with support for allowing multiple SELinux permissions at once). I have also updated binaries (now built for armeabi, armeabi-v7a, mips and x86). You can download them from XDA Developers or GitHub.

moonbutt74 said:
okay so i am a bit of a dumb dumb, would be up for jumping in on my thread and helping out.
the problem with supersu seems to be at app_process -> /system/xbin/daemonsu
Code:
F/appproc ( 305): Error changing dalvik-cache ownership : Permission denied
F/libc ( 305): Fatal signal 6 (SIGABRT), code -6 in tid 305 (app_process32_o)
Click to expand...
Click to collapse
Sorry, I don't know what can be your problem. But have you looked at logcat? You should see exact missing SELinux permissions there...
moonbutt74 said:
also how do i build these tools fully static if possible ? the deb arm chroot doesn't seem to like them
Click to expand...
Click to collapse
These binaries are built static. Or at least static for Android (standard NDK build). Debian in chroot may use different libc or something like that.

Mikos,
hi , thanks again i got sorted on working with the toolkit :good:
i am 33 permissive domains and numerous modified permissions in and still haven't hit on the right one yet, but i'm having fun.
i am guessing file_lnk or a trans permission is what i should be focusing on ?
a quick question, the policy injection is permanent or do i need to script out an init.rc or init.d function ?
i ask because i did an experiment while in recovery with system mounted to restrict/remove a permission/permissive domain and on rebooting to recovery the change stuck, i modified access to sbin and sure enough after rebooting to recovery i could not run the custom utillities i have installed even with root access.
also i can not access allow/neverallow [av rules] rules when using sesearch, is this an intended limitation, or is there some additional code/patching required?
thanks.
m

Nice tool, thanks. Is there a way to inject new source and target types or is it only possible to expand existing contexts?

cloooned said:
Nice tool, thanks. Is there a way to inject new source and target types or is it only possible to expand existing contexts?
Click to expand...
Click to collapse
C,
hi, you can only work with what's in the policy if i'm doing the following correctly
for -s <source type>
Code:
sepolicy-inject -s [COLOR="Red"]hack[/COLOR] -t system -c process -p write -P sepolicy -o sepolicy-UNdead
libsepol.policydb_index_others: security: 1 users, 2 roles, 1331 types, 0 bools
libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security: 86 classes, 15661 rules, 0 cond rules
source type hack does not exist
Could not add rule
same for -t <target type>
Code:
sepolicy-inject -s shell -t [COLOR="Red"]hack[/COLOR] -c process -p write -P sepolicy -o sepolicy-UNdead
"blah blah"
target type hack does not exist
Could not add rule
NOT the same for -c <class> , with class i was looking through external/sepolicy/security_classes to find a valid class not in policy
# More SE-X Windows stuff
class x_resource # userspace
so
Code:
sepolicy-inject -s shell -t system -c [COLOR="Red"]x_resource[/COLOR] -p write -P sepolicy -o sepolicy-UNdead
libsepol.policydb_index_others: security: 1 users, 2 roles, 1331 types, 0 bools
libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security: 86 classes, 15661 rules, 0 cond rules
sesearch -A -c x_resource sepolicy-UNdead
Found 1 semantic av rules:
allow shell system_server : [COLOR="Red"]x_resource[/COLOR] write ;
so, again i am probably doing the first two wrong but i'm having a difficult time finding out what valid entries i can attempt
for <source> and <target> that aren't in the policy. <class> was easier as i figured there would be any x_window stuff.
m

Mikos said:
In Android 5.0, SELinux is in enforcing mode and sometimes you (or some root application) need to change SELinux policy. There has been only one tool capable of this at runtime - Chainfire's supolicy (part of SuperSU). But this tool is closed source and closed source root apps are great security risk. So I have fixed and enhanced sepolicy-inject from Joshua Brindle and combined it with setools-android by Dmitry Podgorny (pasis) to make it buildable with Android NDK.
Click to expand...
Click to collapse
Hi and thank you for the awesome tool!
A little question (probably also a dumb one) - will it work if called for init service, user root group root, default init service context?
Something like
Code:
service humble_sepatcher /system/bin/sh /system/xbin/sepolicy-inject "[ [I]parameters go here I suppose ;)[/I] ]"
user root
group root
class core
oneshot
Usecase:
I want to temporarily switch Selinux to Permissive mode very early in the init sequence (adding early initd to a ROM I don't have sources for)
setenforce and "write /sys/fs/selinux/enforce 0" do not work during init (but after the system boots completely and SUperSu finally does its deed, I can do setenforce 0 and enter permissive mode)
Also, since I am rather lame when it comes to Selinux what would be the best way to go about it ? (I suspect that allowing /system/bin/sh and echo to write to /sys/fs/selinux/enforce might be enough, but so far I can't even think of where to start)

Hello @Mikos,
I was wondering if your tool would get an update to support android 6 and policydb version 30. In the attachment is the error I receive.

I made a modification to sepolicy-inject to add a command (sepolicy-inject -R) to revert all the sepolicy changes. It does this by simply loading the original sepolicy in the ramdisk (/sepolicy) without modifying it.
http://pastebin.com/fKTu3FRC

@pittvandewitt I have uploaded new version 1.2 which does support policydb version 30 (Android 6) and also supports 64-bit architectures (arm64-v8a, mips64, x86_64).

Mikos said:
@pittvandewitt I have uploaded new version 1.2 which does support policydb version 30 (Android 6) and also supports 64-bit architectures (arm64-v8a, mips64, x86_64).
Click to expand...
Click to collapse
This is awesome news! Thank you for your work and also for letting me know

Is there anywhere that explains the usage of the injection tools - specifically how to manipulate the commands to achieve your intent? The instructions are limited and my time with selinux has only just begun and I am having a difficult time getting good search results on making the sepolicy changes I need. I specifically need to create an allowance to let a kernel script run at boot. I currently have a kernel script that gets pushed to the system partition during the flash and runs on boot without superSU installed in marshmallow, but on N-preview it does not run and I get sepolicy denials. If anyone can either give me a few pointers on using this tool, or knows of a good guide somewhere for me to get going - it would be much appreciated. TIA.

delete this somehow plz

Hy, everyone
This tool is musthave for the root\kernel devs, but it is so "unfinished"
I have added a few lines of code to make it powerfull and understand tool.
(#) Usage:
Injecting a rule:
./sepolicy-inject -s <source>[,...] -t <target>[,...] -c <class> -p <perm>[,...] [-N] -P <input> [-o <output>] [-v]
Injecting a rule no-audit (AUDITDENY):
./sepolicy-inject -s <source>[,...] -t <target>[,...] -c <class> -p <perm>[,...] -n [-N] -P <inpit> [-o <output>] [-v]
Change a permissive domain to non-permissive:
./sepolicy-inject -z <type> -P <input> [-o <output>] [-v]
Injecting a permissive domain, create new if missing:
./sepolicy-inject -Z <type> -P <input> [-o <output>] [-v]
Add a type attribute to a domain:
./sepolicy-inject -s <type>[,...] -a <attribute>[,...] -P <input> [-o <output>] [-v]
Remove a type attribute from a domain:
./sepolicy-inject -s <type>[,...] -A <attribute>[,...] -P <input> [-o <output>] [-v]
Add a transition source-->target (class) [new]:
./sepolicy-inject -s <source> -t <target> -c <class> -f <new> -P <input> [-o <output>] [-v]
Test a SELinux type exists:
./sepolicy-inject -e -s <type> -P <input> [-v]
Test a SELinux class exists:
./sepolicy-inject -e -c <class> -P <input> [-v]
Test a SELinux type has attribute:
./sepolicy-inject -e -s <type> -a <attribute> -P <input> [-v]
Test a SELinux type missing attribute:
./sepolicy-inject -e -s <type> -A <attribute> -P <input> [-v]
Use -v for verbose
Use -o for output file, rewriting the input file otherwise
Click to expand...
Click to collapse
This way it can work lke this:
.
/sepolicy-inject -s system_server,system_app,untrusted_app -t logd -c dir -p search,add_name,remove_name,open,read,write,getattr,setattr,relabelfrom,relabelto -P sepolicy
./sepolicy-inject -n -s shell -t kernel -c system -p module_request,ipc_info,syslog_console -N -P sepolicy
./sepolicy-inject -s shell -a system_domain,mlstrustedsubject -P sepolicy
./sepolicy-inject -s shell -A trstdomain_no_access_subject -P sepolicy
Click to expand...
Click to collapse
Attaching the source and precompiled cygwin and android binaries

darkmen said:
Hy, everyone
This tool is musthave for the root\kernel devs, but it is so "unfinished"
I have added a few lines of code to make it powerfull and understand tool.
This way it can work lke this:
.
Attaching the source and precompiled cygwin and android binaries
Click to expand...
Click to collapse
Hi, I'm using CM14.1 right now, I am having issue modifying system files, for examples, I am using FasterGPS to modify /system/etc/gps.conf, but FasterGPS failed to modify that file because of selinux is enforcing, because FasterGPS is working normally if I set set selinux is permissive using command setenforce=0 from root shell...
Can I use this setools-android to add rule(s) to selinux policy to allow some certain apps to modify system files without have to manually set selinux as permissive first?
If I can do that using this tool, how do I do it?
I have logcat from the app with selinux=enforce and selinux=policy to compare:
selinux=enforce
Code:
12-10 20:02:49.309 15389 15389 I FasterGPS: Loading /system/etc/gps.conf...
12-10 20:02:49.336 4598 4598 I MicroDetector: Keeping mic open: false
12-10 20:02:49.336 4598 16532 I DeviceStateChecker: DeviceStateChecker cancelled
12-10 20:02:49.337 4598 16514 I AudioController: internalShutdown
12-10 20:02:49.337 4598 16514 I MicrophoneInputStream: mic_close [email protected]
12-10 20:02:49.337 4598 9769 I MicroRecognitionRunner: Stopping hotword detection.
12-10 20:02:49.341 4598 4598 W SearchService: Abort, client detached.
12-10 20:02:49.353 369 369 I MSM-irqbalance: Decided to move IRQ128 from CPU5 to CPU4
12-10 20:02:49.357 1128 16590 D audio_hw_primary: in_standby: enter: stream (0xf6351f80) usecase(7: audio-record)
12-10 20:02:49.390 1128 16590 D audio_hw_primary: disable_audio_route: reset and update mixer path: audio-record
12-10 20:02:49.391 1128 16590 D hardware_info: hw_info_append_hw_type : device_name = voice-rec-mic
12-10 20:02:49.391 1128 16590 D audio_hw_primary: disable_snd_device: snd_device(66: voice-rec-mic)
12-10 20:02:49.394 1128 16590 D audio_hw_primary: in_set_parameters: enter: kvpairs=routing=0
12-10 20:02:49.397 1981 2106 I ActivityManager: Displayed org.fastergps/.ui.BaseActivity: +189ms
12-10 20:02:49.403 4598 16533 I MicroRecognitionRunner: Detection finished
12-10 20:02:49.406 1128 1326 D audio_hw_primary: adev_close_input_stream: enter:stream_handle(0xf6351f80)
12-10 20:02:49.406 1128 1326 D audio_hw_primary: in_standby: enter: stream (0xf6351f80) usecase(7: audio-record)
12-10 20:02:49.651 372 372 W SurfaceFlinger: couldn't log to binary event log: overflow.
12-10 20:02:49.883 16740 16740 D AndroidRuntime: >>>>>> START com.android.internal.os.RuntimeInit uid 0 <<<<<<
12-10 20:02:49.887 16740 16740 D AndroidRuntime: CheckJNI is OFF
12-10 20:02:49.976 16740 16740 D ICU : No timezone override file found: /data/misc/zoneinfo/current/icu/icu_tzdata.dat
12-10 20:02:49.975 16740 16740 W main : type=1400 audit(0.0:207): avc: denied { write } for name="arm64" dev="mmcblk0p31" ino=278530 scontext=u:r:shell:s0 tcontext=u:object_r:dalvikcache_data_file:s0 tclass=dir permissive=0
12-10 20:02:49.975 16740 16740 W main : type=1400 audit(0.0:208): avc: denied { write } for name="arm64" dev="mmcblk0p31" ino=278530 scontext=u:r:shell:s0 tcontext=u:object_r:dalvikcache_data_file:s0 tclass=dir permissive=0
12-10 20:02:50.025 16740 16740 I Radio-JNI: register_android_hardware_Radio DONE
12-10 20:02:50.042 16740 16740 D AndroidRuntime: Calling main entry com.android.commands.am.Am
12-10 20:02:50.045 16757 16757 W main : type=1400 audit(0.0:209): avc: denied { dac_override } for capability=1 scontext=u:r:shell:s0 tcontext=u:r:shell:s0 tclass=capability permissive=0
12-10 20:02:50.045 16757 16757 W main : type=1400 audit(0.0:210): avc: denied { dac_override } for capability=1 scontext=u:r:shell:s0 tcontext=u:r:shell:s0 tclass=capability permissive=0
12-10 20:02:50.045 16757 16757 W main : type=1400 audit(0.0:211): avc: denied { dac_override } for capability=1 scontext=u:r:shell:s0 tcontext=u:r:shell:s0 tclass=capability permissive=0
12-10 20:02:50.045 16757 16757 W main : type=1400 audit(0.0:212): avc: denied { dac_override } for capability=1 scontext=u:r:shell:s0 tcontext=u:r:shell:s0 tclass=capability permissive=0
12-10 20:02:50.081 16740 16740 D AndroidRuntime: Shutting down VM
12-10 20:02:52.089 1981 1981 W WindowManager: Attempted to remove non-existing token: [email protected]
12-10 20:02:53.159 3698 3698 W InputMethodService: Window size has been changed. This may cause jankiness of resizing window: -1 -> -2
12-10 20:02:53.197 3698 3698 I LatinIME: Starting input. Cursor position = 0,0
12-10 20:02:53.333 379 379 E VM_BMS : failed to set wake_lock rc=-13
12-10 20:02:53.333 379 379 D VM_BMS : New BMS data - Size=56
12-10 20:02:53.333 379 379 D VM_BMS : Start process_bms_data
12-10 20:02:53.337 379 379 D VM_BMS : For batt_temp=338 fcc_mah=4032
12-10 20:02:53.337 379 379 D VM_BMS : For ocv=4196145 batt_temp=338 soc=86
12-10 20:02:53.337 379 379 D VM_BMS : fifo_count=5 acc_count=0
12-10 20:02:53.337 379 379 D VM_BMS : INIT: ocv=4196145 last_ocv=4196145 batt_temp=338 soc=86
12-10 20:02:53.337 379 379 D VM_BMS : For soc=86 batt_temp=338 slope=11600
12-10 20:02:53.337 379 379 D VM_BMS : For soc=86 batt_temp=338 rbatt_sf=92
12-10 20:02:53.337 379 379 D VM_BMS : rbatt_mohm_default=120, rbatt_mohm=110, sf=92 batt_temp=338
12-10 20:02:53.337 379 379 D VM_BMS : For ocv=4195968 batt_temp=338 soc=85
12-10 20:02:53.337 379 379 D VM_BMS : FIFO=0 fifo_avg=4.166385 rbatt=0.120000 slope=1.160000 ibatt=0.247261 ocv=4.195968 soc=85 fcc_ah=4.032000 sample_count=128 sample_interval=70 seq_num=80
12-10 20:02:53.337 379 379 D VM_BMS : For soc=85 batt_temp=338 slope=11600
12-10 20:02:53.337 379 379 D VM_BMS : For soc=85 batt_temp=338 rbatt_sf=93
12-10 20:02:53.337 379 379 D VM_BMS : rbatt_mohm_default=120, rbatt_mohm=111, sf=93 batt_temp=338
12-10 20:02:53.337 379 379 D VM_BMS : For ocv=4195738 batt_temp=338 soc=85
12-10 20:02:53.337 379 379 D VM_BMS : FIFO=1 fifo_avg=4.156925 rbatt=0.121000 slope=1.160000 ibatt=0.321717 ocv=4.195738 soc=85 fcc_ah=4.032000 sample_count=128 sample_interval=70 seq_num=80
12-10 20:02:53.337 379 379 D VM_BMS : For soc=85 batt_temp=338 slope=11600
12-10 20:02:53.337 379 379 D VM_BMS : For soc=85 batt_temp=338 rbatt_sf=93
12-10 20:02:53.338 379 379 D VM_BMS : rbatt_mohm_default=120, rbatt_mohm=111, sf=93 batt_temp=338
12-10 20:02:53.338 379 379 D VM_BMS : For ocv=4195592 batt_temp=338 soc=85
12-10 20:02:53.338 379 379 D VM_BMS : FIFO=2 fifo_avg=4.171121 rbatt=0.121000 slope=1.160000 ibatt=0.202844 ocv=4.195592 soc=85 fcc_ah=4.032000 sample_count=128 sample_interval=70 seq_num=80
12-10 20:02:53.338 379 379 D VM_BMS : For soc=85 batt_temp=338 slope=11600
12-10 20:02:53.338 379 379 D VM_BMS : For soc=85 batt_temp=338 rbatt_sf=93
12-10 20:02:53.338 379 379 D VM_BMS : rbatt_mohm_default=120, rbatt_mohm=111, sf=93 batt_temp=338
12-10 20:02:53.338 379 379 D VM_BMS : For ocv=4195721 batt_temp=338 soc=85
12-10 20:02:53.338 379 379 D VM_BMS : FIFO=3 fifo_avg=4.217594 rbatt=0.121000 slope=1.160000 ibatt=-0.181300 ocv=4.195722 soc=85 fcc_ah=4.032000 sample_count=128 sample_interval=70 seq_num=80
12-10 20:02:53.338 379 379 D VM_BMS : For soc=85 batt_temp=338 slope=11600
12-10 20:02:53.338 379 379 D VM_BMS : For soc=85 batt_temp=338 rbatt_sf=93
12-10 20:02:53.338 379 379 D VM_BMS : rbatt_mohm_default=120, rbatt_mohm=111, sf=93 batt_temp=338
12-10 20:02:53.338 379 379 D VM_BMS : For ocv=4195817 batt_temp=338 soc=85
12-10 20:02:53.338 379 379 D VM_BMS : FIFO=4 fifo_avg=4.211973 rbatt=0.121000 slope=1.160000 ibatt=-0.133918 ocv=4.195817 soc=85 fcc_ah=4.032000 sample_count=128 sample_interval=70 seq_num=80
12-10 20:02:53.338 379 379 I VM_BMS : power_supply_update: ocv_uv=4195817 ibatt=-133918 soc=85 seq_num=80
12-10 20:02:53.338 379 379 D VM_BMS : End process_bms_data
12-10 20:02:53.338 379 379 E VM_BMS : failed to wake_unlock rc=-13
12-10 20:02:53.540 380 498 I ThermalEngine: TM Id 'CHARGING_MONITOR' Sensor 'pop_mem' - alarm raised 1 at 43.0 degC
12-10 20:02:53.540 380 498 E ThermalEngine: Unable to set battery charging mitigation to 1
12-10 20:02:54.353 369 369 I MSM-irqbalance: Decided to move IRQ166 from CPU5 to CPU4
12-10 20:02:54.359 11980 13827 I PlayCommon: [497] com.google.android.play.a.g.e(900): Preparing logs for uploading
12-10 20:02:54.360 11980 13827 I PlayCommon: [497] com.google.android.play.a.g.e(902): No file ready to send
12-10 20:02:54.803 11980 12020 I PlayCommon: [444] com.google.android.play.a.g.e(900): Preparing logs for uploading
12-10 20:02:54.804 11980 12020 I PlayCommon: [444] com.google.android.play.a.g.e(902): No file ready to send
12-10 20:02:55.638 15389 15389 W IInputConnectionWrapper: finishComposingText on inactive InputConnection
12-10 20:02:55.638 15389 15389 W IInputConnectionWrapper: finishComposingText on inactive InputConnection
12-10 20:02:55.639 3698 3698 W InputMethodService: Window size has been changed. This may cause jankiness of resizing window: -1 -> -2
12-10 20:02:55.640 15389 15389 W IInputConnectionWrapper: finishComposingText on inactive InputConnection
12-10 20:02:58.920 1981 4461 W InputMethodManagerService: Window already focused, ignoring focus gain of: [email protected] attribute=null, token = [email protected]
12-10 20:02:59.354 369 369 I MSM-irqbalance: Decided to move IRQ155 from CPU7 to CPU4
12-10 20:03:04.353 369 369 I MSM-irqbalance: Decided to move IRQ215 from CPU7 to CPU6
12-10 20:03:06.102 15389 15389 W InputEventReceiver: Attempted to finish an input event but the input event receiver has already been disposed.
12-10 20:03:06.102 15389 15389 I FasterGPS: Writing gps.conf to private files...
12-10 20:03:06.108 16797 16797 E linker : normalize_path - invalid input: "null", the input path should be absolute
12-10 20:03:06.108 16797 16797 W linker : Warning: unable to normalize "null"
12-10 20:03:06.145 15389 15389 I FasterGPS: Remounting for RW...
12-10 20:03:06.149 16807 16807 E linker : normalize_path - invalid input: "null", the input path should be absolute
12-10 20:03:06.149 16807 16807 W linker : Warning: unable to normalize "null"
12-10 20:03:06.215 15389 15389 W org.fastergps: type=1400 audit(0.0:213): avc: denied { read } for name="RootToolsMounts" dev="mmcblk0p31" ino=565251 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0
12-10 20:03:06.225 15389 15389 E RootCommands: Exception
12-10 20:03:06.225 15389 15389 E RootCommands: java.io.FileNotFoundException: /data/local/RootToolsMounts (Permission denied)
12-10 20:03:06.225 15389 15389 E RootCommands: at java.io.FileInputStream.open(Native Method)
12-10 20:03:06.225 15389 15389 E RootCommands: at java.io.FileInputStream.<init>(FileInputStream.java:146)
12-10 20:03:06.225 15389 15389 E RootCommands: at java.io.FileInputStream.<init>(FileInputStream.java:99)
12-10 20:03:06.225 15389 15389 E RootCommands: at java.io.FileReader.<init>(FileReader.java:58)
12-10 20:03:06.225 15389 15389 E RootCommands: at org.sufficientlysecure.rootcommands.Remounter.getMounts(Remounter.java:173)
12-10 20:03:06.225 15389 15389 E RootCommands: at org.sufficientlysecure.rootcommands.Remounter.remount(Remounter.java:66)
12-10 20:03:06.225 15389 15389 E RootCommands: at org.sufficientlysecure.rootcommands.Toolbox.remount(Toolbox.java:733)
12-10 20:03:06.225 15389 15389 E RootCommands: at org.fastergps.util.Utils.writeConfig(Utils.java:241)
12-10 20:03:06.225 15389 15389 E RootCommands: at org.fastergps.ui.BaseActivity$2.onPreferenceChange(BaseActivity.java:250)
12-10 20:03:06.225 15389 15389 E RootCommands: at android.preference.Preference.callChangeListener(Preference.java:939)
12-10 20:03:06.225 15389 15389 E RootCommands: at android.preference.ListPreference.onDialogClosed(ListPreference.java:282)
12-10 20:03:06.225 15389 15389 E RootCommands: at android.preference.DialogPreference.onDismiss(DialogPreference.java:402)
12-10 20:03:06.225 15389 15389 E RootCommands: at android.app.Dialog$ListenersHandler.handleMessage(Dialog.java:1343)
12-10 20:03:06.225 15389 15389 E RootCommands: at android.os.Handler.dispatchMessage(Handler.java:102)
12-10 20:03:06.225 15389 15389 E RootCommands: at android.os.Looper.loop(Looper.java:154)
12-10 20:03:06.225 15389 15389 E RootCommands: at android.app.ActivityThread.main(ActivityThread.java:6126)
12-10 20:03:06.225 15389 15389 E RootCommands: at java.lang.reflect.Method.invoke(Native Method)
12-10 20:03:06.225 15389 15389 E RootCommands: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:886)
12-10 20:03:06.225 15389 15389 E RootCommands: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:776)
12-10 20:03:06.225 15389 15389 E FasterGPS: remount failed!
selinux=permissive
Code:
12-10 20:19:13.707 9292 9292 I FasterGPS: Loading /system/etc/gps.conf...
12-10 20:19:13.774 9292 9324 I Adreno : QUALCOMM build : d842ad3, Ia10634f51b
12-10 20:19:13.774 9292 9324 I Adreno : Build Date : 01/04/16
12-10 20:19:13.774 9292 9324 I Adreno : OpenGL ES Shader Compiler Version: XE031.06.00.05
12-10 20:19:13.774 9292 9324 I Adreno : Local Branch : mybranch17585849
12-10 20:19:13.774 9292 9324 I Adreno : Remote Branch : quic/LA.BR.1.2.6_rb1.7
12-10 20:19:13.774 9292 9324 I Adreno : Remote Branch : NONE
12-10 20:19:13.774 9292 9324 I Adreno : Reconstruct Branch : NOTHING
12-10 20:19:13.780 9292 9324 I OpenGLRenderer: Initialized EGL, version 1.4
12-10 20:19:13.780 9292 9324 D OpenGLRenderer: Swap behavior 1
12-10 20:19:13.851 1277 1305 I ActivityManager: Displayed org.fastergps/.ui.BaseActivity: +459ms
12-10 20:19:13.886 371 371 W SurfaceFlinger: couldn't log to binary event log: overflow.
12-10 20:19:13.919 388 511 I ThermalEngine: TM Id 'CHARGING_MONITOR' Sensor 'pop_mem' - alarm raised 2 at 45.0 degC
12-10 20:19:13.920 388 511 E ThermalEngine: Unable to set battery charging mitigation to 2
12-10 20:19:14.273 9322 9322 D AndroidRuntime: >>>>>> START com.android.internal.os.RuntimeInit uid 0 <<<<<<
12-10 20:19:14.277 9322 9322 D AndroidRuntime: CheckJNI is OFF
12-10 20:19:14.422 9322 9322 I main : type=1400 audit(0.0:26): avc: denied { execmem } for scontext=u:r:zygote:s0 tcontext=u:r:zygote:s0 tclass=process permissive=1
12-10 20:19:14.422 9322 9322 I main : type=1400 audit(0.0:27): avc: denied { execute } for path="/dev/ashmem" dev="tmpfs" ino=5858 scontext=u:r:zygote:s0 tcontext=u:object_r:ashmem_device:s0 tclass=chr_file permissive=1
12-10 20:19:14.422 9322 9322 I main : type=1400 audit(0.0:28): avc: denied { execute } for path=2F6465762F6173686D656D2F64616C76696B2D6A69742D636F64652D6361636865202864656C6574656429 dev="tmpfs" ino=85393 scontext=u:r:zygote:s0 tcontext=u:object_r:zygote_tmpfs:s0 tclass=file permissive=1
12-10 20:19:14.448 9322 9322 D ICU : No timezone override file found: /data/misc/zoneinfo/current/icu/icu_tzdata.dat
--------- beginning of crash
12-10 20:19:14.471 9328 9328 F libc : CANNOT LINK EXECUTABLE "/system/bin/dex2oat": "/system/lib64/libsigchain.so" is 64-bit instead of 32-bit
12-10 20:19:14.471 9328 9328 F libc : Fatal signal 6 (SIGABRT), code -6 in tid 9328 (dex2oat)
12-10 20:19:14.478 243 243 W : debuggerd: handling request: pid=9328 uid=0 gid=0 tid=9328
12-10 20:19:14.544 9329 9329 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
12-10 20:19:14.544 9329 9329 F DEBUG : CM Version: '14.1-20161210-NIGHTLY-ido'
12-10 20:19:14.544 9329 9329 F DEBUG : Build fingerprint: 'Xiaomi/cm_ido/ido:7.1.1/NMF26O/40801d0bc7:userdebug/test-keys'
12-10 20:19:14.544 9329 9329 F DEBUG : Revision: '0'
12-10 20:19:14.544 9329 9329 F DEBUG : ABI: 'arm'
12-10 20:19:14.545 9329 9329 F DEBUG : pid: 9328, tid: 9328, name: dex2oat >>> /system/bin/dex2oat <<<
12-10 20:19:14.545 9329 9329 F DEBUG : signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
12-10 20:19:14.545 9329 9329 F DEBUG : r0 00000000 r1 00002470 r2 00000006 r3 00000008
12-10 20:19:14.545 9329 9329 F DEBUG : r4 f744258c r5 00000006 r6 f7442534 r7 0000010c
12-10 20:19:14.545 9329 9329 F DEBUG : r8 fff2ea58 r9 00000001 sl fff2ea80 fp f73d0010
12-10 20:19:14.545 9329 9329 F DEBUG : ip 00000002 sp fff2e9f0 lr f7422d5f pc f7423778 cpsr 200f0010
12-10 20:19:14.559 9329 9329 F DEBUG :
12-10 20:19:14.559 9329 9329 F DEBUG : backtrace:
12-10 20:19:14.562 9329 9329 F DEBUG : #00 pc 00046778 /system/bin/linker (__dl_tgkill+12)
12-10 20:19:14.562 9329 9329 F DEBUG : #01 pc 00045d5b /system/bin/linker (__dl_pthread_kill+34)
12-10 20:19:14.562 9329 9329 F DEBUG : #02 pc 0003e0ff /system/bin/linker (__dl_raise+10)
12-10 20:19:14.562 9329 9329 F DEBUG : #03 pc 0003cbbb /system/bin/linker (__dl___libc_android_abort+34)
12-10 20:19:14.562 9329 9329 F DEBUG : #04 pc 0003bb18 /system/bin/linker (__dl_abort+4)
12-10 20:19:14.563 9329 9329 F DEBUG : #05 pc 0003dbfb /system/bin/linker (__dl___libc_fatal+22)
12-10 20:19:14.563 9329 9329 F DEBUG : #06 pc 00009c47 /system/bin/linker (__dl__ZL29__linker_init_post_relocationR19KernelArgumentBlockj+3146)
12-10 20:19:14.563 9329 9329 F DEBUG : #07 pc 00008f67 /system/bin/linker (__dl___linker_init+358)
12-10 20:19:14.563 9329 9329 F DEBUG : #08 pc 000027c0 /system/bin/linker (_start+4)
12-10 20:19:14.604 1277 2062 W NativeCrashListener: Couldn't find ProcessRecord for pid 9328
12-10 20:19:14.607 243 243 W : debuggerd: resuming target 9328
12-10 20:19:14.607 243 243 E : debuggerd: failed to send signal 18 to target: No such process
12-10 20:19:14.614 1277 1302 I BootReceiver: Copying /data/tombstones/tombstone_01 to DropBox (SYSTEM_TOMBSTONE)
12-10 20:19:14.622 9322 9322 W art : Failed execv(/system/bin/dex2oat --runtime-arg -classpath --runtime-arg /system/framework/am.jar --instruction-set=arm64 --instruction-set-features=smp,a53 --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=cortex-a53 --instruction-set-features=default --no-watch-dog --dex-file=/system/framework/am.jar --oat-fd=11 --oat-location=/data/dalvik-cache/arm64/[email protected]@[email protected] --compiler-filter=speed) because non-0 exit status
12-10 20:19:14.690 9322 9322 I Radio-JNI: register_android_hardware_Radio DONE
12-10 20:19:14.715 9322 9322 D AndroidRuntime: Calling main entry com.android.commands.am.Am
12-10 20:19:14.733 370 370 E SELinux : avc: denied { find } for service=activity pid=9322 uid=0 scontext=u:r:zygote:s0 tcontext=u:object_r:activity_service:s0 tclass=service_manager permissive=1
12-10 20:19:14.734 370 370 E SELinux : avc: denied { find } for service=package pid=9322 uid=0 scontext=u:r:zygote:s0 tcontext=u:object_r:package_service:s0 tclass=service_manager permissive=1
12-10 20:19:14.732 9322 9322 I main : type=1400 audit(0.0:29): avc: denied { call } for scontext=u:r:zygote:s0 tcontext=u:r:system_server:s0 tclass=binder permissive=1
12-10 20:19:14.732 9322 9322 I main : type=1400 audit(0.0:30): avc: denied { transfer } for scontext=u:r:zygote:s0 tcontext=u:r:system_server:s0 tclass=binder permissive=1
12-10 20:19:14.762 3169 3169 I Binder:1277_7: type=1400 audit(0.0:31): avc: denied { call } for scontext=u:r:system_server:s0 tcontext=u:r:zygote:s0 tclass=binder permissive=1
12-10 20:19:14.774 9322 9322 D AndroidRuntime: Shutting down VM
12-10 20:19:16.169 368 368 I MSM-irqbalance: Decided to move IRQ166 from CPU7 to CPU6
12-10 20:19:16.789 1277 1277 W WindowManager: Attempted to remove non-existing token: [email protected]
12-10 20:19:16.979 388 511 I ThermalEngine: TM Id 'CHARGING_MONITOR' Sensor 'pop_mem' - alarm cleared 2 at 43.0 degC
12-10 20:19:16.979 388 511 E ThermalEngine: Unable to set battery charging mitigation to 1
12-10 20:19:18.558 3073 3497 E ctxmgr : [ProducerActiveIntervalImpl]closeActiveInterval: Error: ongoing, trying to close
12-10 20:19:18.593 3073 5394 I PlaceInferenceEngine: [anon] Setup for configuration 105:[]
12-10 20:19:18.593 3073 5394 I PlaceInferenceEngine: [anon] Active modules after start(): 0
12-10 20:19:21.168 368 368 I MSM-irqbalance: Decided to move IRQ155 from CPU7 to CPU6
12-10 20:19:22.869 9292 9292 W InputEventReceiver: Attempted to finish an input event but the input event receiver has already been disposed.
12-10 20:19:22.878 1277 6085 W InputMethodManagerService: Window already focused, ignoring focus gain of: [email protected] attribute=null, token = [email protected]
12-10 20:19:26.168 368 368 I MSM-irqbalance: Decided to move IRQ57 from CPU7 to CPU6
12-10 20:19:27.781 388 513 I ThermalEngine: Mitigation:CLUSTER[1]:1459200 Khz
12-10 20:19:28.486 9292 9292 W InputEventReceiver: Attempted to finish an input event but the input event receiver has already been disposed.
12-10 20:19:28.486 9292 9292 I FasterGPS: Writing gps.conf to private files...
12-10 20:19:28.493 9371 9371 E linker : normalize_path - invalid input: "null", the input path should be absolute
12-10 20:19:28.493 9371 9371 W linker : Warning: unable to normalize "null"
12-10 20:19:28.529 9292 9292 I FasterGPS: Remounting for RW...
12-10 20:19:28.532 9381 9381 E linker : normalize_path - invalid input: "null", the input path should be absolute
12-10 20:19:28.532 9381 9381 W linker : Warning: unable to normalize "null"
12-10 20:19:28.602 9292 9292 I org.fastergps: type=1400 audit(0.0:32): avc: denied { read } for name="RootToolsMounts" dev="mmcblk0p31" ino=565251 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=1
12-10 20:19:28.602 9292 9292 I org.fastergps: type=1400 audit(0.0:33): avc: denied { getattr } for path="/data/local/RootToolsMounts" dev="mmcblk0p31" ino=565251 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=1
12-10 20:19:28.612 9394 9394 E linker : normalize_path - invalid input: "null", the input path should be absolute
12-10 20:19:28.613 9394 9394 W linker : Warning: unable to normalize "null"
12-10 20:19:28.702 388 511 I ThermalEngine: TM Id 'CHARGING_MONITOR' Sensor 'pop_mem' - alarm raised 2 at 45.0 degC
12-10 20:19:28.702 388 511 E ThermalEngine: Unable to set battery charging mitigation to 2
12-10 20:19:28.715 9407 9407 E linker : normalize_path - invalid input: "null", the input path should be absolute
12-10 20:19:28.715 9407 9407 W linker : Warning: unable to normalize "null"
12-10 20:19:28.815 9421 9421 E linker : normalize_path - invalid input: "null", the input path should be absolute
12-10 20:19:28.815 9421 9421 W linker : Warning: unable to normalize "null"
12-10 20:19:29.039 9438 9438 E linker : normalize_path - invalid input: "null", the input path should be absolute
12-10 20:19:29.039 9438 9438 W linker : Warning: unable to normalize "null"
12-10 20:19:29.122 9292 9292 I FasterGPS: Copying gps.conf from private files to system partition...
12-10 20:19:29.124 9378 9378 D AndroidRuntime: >>>>>> START com.android.internal.os.RuntimeInit uid 0 <<<<<<
12-10 20:19:29.128 9378 9378 D AndroidRuntime: CheckJNI is OFF
12-10 20:19:29.161 9292 9292 I FasterGPS: Remounting back to RO...
--------------------- update ---------------------
I try one of your example command I get this error:
Code:
1|ido:/system/xbin # ./sepolicy-inject -e -c untrusted_app -P /sepolicy -v
libsepol.avtab_read_item: more than one specifier
libsepol.avtab_read: failed on entry 100 of 19609
error(s) encountered while parsing configuration
Could not load policy
Failed

Help me please with the rule. I'm having an error when running the APPS.
E dex2oat : Failed to create oat file: /data/dalvik-cache/arm/[email protected]@[email protected][email protected]: Permission denied
E dex2oat : Failed to create oat file: /data/dalvik-cache/arm/[email protected]@[email protected][email protected]: Permission denied
I think "sepolicy-inject" help me.
Andrew.

can u update it to inject into android 7.1.x sepolicy ...

WifiStateMachin Bug

Hey,
Issue: Once screen times out or is locked, the phone restarts. WiFi does not enable. Can reproduce every time.
Phone: N9005, BNL8 Modem/Bootloader, CM12 5.5 (same on every build though, since first builds).
Tried: Flashing back to stock then coming back, using KK Modem/Bootloader, Checking MD5.
The issue seems to be only with CM, as using any TW rom the Wifi works fine and the phone doesn't reboot.
Logcat: This is the whole 15 seconds before screen goes off http://pastebin.com/gVvxXzkj
Code:
--------- beginning of crash
01-17 18:39:58.686 696 847 F libc : Fatal signal 11 (SIGSEGV), code 1, fault addr 0x5600001 in tid 847 (WifiStateMachin)
01-17 18:39:58.687 303 695 E audio_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null
01-17 18:39:58.691 295 347 I ThermalEngine: Mitigation:CPU[1]:2496000 Khz
01-17 18:39:58.692 696 4675 I WifiNative-HAL: Waiting for HAL events mWifiHalHandle=-2088550336
01-17 18:39:58.693 696 4675 E wifi : getStaticLongField sWifiHalHandle 0x5c6bea1c
01-17 18:39:58.804 300 300 I DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
01-17 18:39:58.804 300 300 I DEBUG : Build fingerprint: 'samsung/hltexx/hlte:4.4.2/KOT49H/N9005XXUENC2:user/release-keys'
01-17 18:39:58.804 300 300 I DEBUG : Revision: '8'
01-17 18:39:58.804 300 300 I DEBUG : ABI: 'arm'
01-17 18:39:58.804 300 300 I DEBUG : pid: 696, tid: 847, name: WifiStateMachin >>> system_server <<<
01-17 18:39:58.804 300 300 I DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x5600001
01-17 18:39:58.824 300 300 I DEBUG : r0 05600001 r1 781dfac8 r2 781d05cd r3 ffffffa8
01-17 18:39:58.824 300 300 I DEBUG : r4 05600001 r5 00000000 r6 781dfeb0 r7 6231e740
01-17 18:39:58.824 300 300 I DEBUG : r8 781dfad0 r9 6848d400 sl 781d05cd fp 131cb160
01-17 18:39:58.824 300 300 I DEBUG : ip b4cd1c94 sp 6231e718 lr 781d3d5d pc 781d3d5c cpsr 600f0030
01-17 18:39:58.825 300 300 I DEBUG :
01-17 18:39:58.825 300 300 I DEBUG : backtrace:
01-17 18:39:58.825 300 300 I DEBUG : #00 pc 00008d5c /system/lib/libwifi-service.so (getWifiHandle(wifi_interface_info*)+7)
01-17 18:39:58.825 300 300 I DEBUG : #01 pc 00008d65 /system/lib/libwifi-service.so (getHalInfo(wifi_interface_info*)+4)
01-17 18:39:58.825 300 300 I DEBUG : #02 pc 0000dd2d /system/lib/libwifi-service.so (wifi_get_link_stats+44)
01-17 18:39:58.825 300 300 I DEBUG : #03 pc 00004ed1 /system/lib/libwifi-service.so
01-17 18:39:58.825 300 300 I DEBUG : #04 pc 000379dd /data/dalvik-cache/arm/[email protected]@[email protected]
01-17 18:39:59.492 4678 4687 E cutils-trace: Error opening trace file: Permission denied (13)
01-17 18:40:03.535 300 300 I DEBUG :
01-17 18:40:03.535 300 300 I DEBUG : Tombstone written to: /data/tombstones/tombstone_02
01-17 18:40:03.552 696 726 I Choreographer: Skipped 285 frames! The application may be doing too much work on its main thread.
01-17 18:40:03.555 696 727 E libsuspend: Error reading from /sys/power/wakeup_count: Interrupted system call
01-17 18:40:03.551 847 847 W WifiStateMachin: type=1701 audit(0.0:268): auid=4294967295 uid=1000 gid=1000 ses=4294967295 subj=u:r:system_server:s0 reason="memory violation" sig=11
01-17 18:40:03.561 696 719 I BootReceiver: Copying /data/tombstones/tombstone_02 to DropBox (SYSTEM_TOMBSTONE)
01-17 18:40:03.565 696 2214 E SharedPreferencesImpl: Couldn't create directory for SharedPreferences file shared_prefs/log_files.xml

Bump

LePro3 don't let me play high end games

Mine le pro crashes some high end gaming apps. Tested this for "lord of the Fallen" and "Realboxing".
Here are the crash log für lotf:
http://pastebin.com/Mq86kkv4
And here are the log for Realboxing:
http://pastebin.com/ZeJFh9Z3
I hop you could help me a bit to find out why I can't play games, wich need high recources.
Chris
For LOTF I have now logged only for Errors and got this:
Code:
02-16 10:20:19.588 23449 23483 E MediaPlayer: stop called in state 1
02-16 10:20:19.589 23449 23483 E MediaPlayer: error (-38, 0)
02-16 10:20:19.589 23449 23449 E MediaPlayer: Error (-38,0)
02-16 10:20:23.179 3674 3682 E ANDR-PERF-RESOURCEQS: Failed to apply optimization [4, 0]
02-16 10:20:24.707 23449 23535 F libc : Fatal signal 11 (SIGSEGV), code 1, fault addr 0xc7f80084 in tid 23535 (AudioThread 0)
02-16 10:20:24.811 629 629 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
02-16 10:20:24.812 629 629 F DEBUG : Build fingerprint: 'LeEco/ZL1_CN/le_zl1:6.0.1/WAXCNFN5801811012S/letv11011204:user/release-keys'
02-16 10:20:24.812 629 629 F DEBUG : Revision: '0'
02-16 10:20:24.812 629 629 F DEBUG : ABI: 'arm'
02-16 10:20:24.813 629 629 F DEBUG : pid: 23449, tid: 23535, name: AudioThread 0 >>> com.cigames.lotfbof <<<
02-16 10:20:24.813 629 629 F DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0xc7f80084
02-16 10:20:24.871 629 629 F DEBUG : r0 00000014 r1 00000003 r2 f742d300 r3 c7f80000
02-16 10:20:24.871 629 629 F DEBUG : r4 c9996000 r5 00000000 r6 c52a8048 r7 c7f97280
02-16 10:20:24.871 629 629 F DEBUG : r8 f7420594 r9 f742d2f4 sl 00000001 fp ce851620
02-16 10:20:24.871 629 629 F DEBUG : ip c7f80050 sp ce851528 lr f7403f31 pc f7400a5a cpsr 20010030
02-16 10:20:24.880 629 629 F DEBUG :
02-16 10:20:24.880 629 629 F DEBUG : backtrace:
02-16 10:20:24.880 629 629 F DEBUG : #00 pc 00055a5a /system/lib/libc.so (ifree+53)
02-16 10:20:24.880 629 629 F DEBUG : #01 pc 00058f2d /system/lib/libc.so (je_free+388)
02-16 10:20:24.881 629 629 F DEBUG : #02 pc 0000e7c7 /system/lib/libutils.so (_ZNK7android7RefBase9decStrongEPKv+50)
02-16 10:20:24.881 629 629 F DEBUG : #03 pc 00009955 /system/lib/libwilhelm.so
02-16 10:20:24.881 629 629 F DEBUG : #04 pc 00014115 /system/lib/libwilhelm.so
02-16 10:20:24.881 629 629 F DEBUG : #05 pc 00019163 /system/lib/libwilhelm.so
02-16 10:20:24.881 629 629 F DEBUG : #06 pc 03c26be4 /data/app/com.cigames.lotfbof-1/lib/arm/libUE4.so (_ZN16FSLESSoundSource4StopEv+108)
02-16 10:20:24.881 629 629 F DEBUG : #07 pc 02d05804 /data/app/com.cigames.lotfbof-1/lib/arm/libUE4.so (_ZN12FAudioDevice11StopSourcesER6TArrayIP13FWaveInstance17FDefaultAllocatorEi+512)
02-16 10:20:24.881 629 629 F DEBUG : #08 pc 02d064b8 /data/app/com.cigames.lotfbof-1/lib/arm/libUE4.so (_ZN12FAudioDevice6UpdateEb+1880)
02-16 10:20:24.881 629 629 F DEBUG : #09 pc 01613d30 /data/app/com.cigames.lotfbof-1/lib/arm/libUE4.so (_ZN10TGraphTaskI18FFunctionGraphTaskE11ExecuteTaskER6TArrayIP14FBaseGraphTask17FDefaultAllocatorEN13ENamedThreads4TypeE+84)
02-16 10:20:24.881 629 629 F DEBUG : #10 pc 018f021c /data/app/com.cigames.lotfbof-1/lib/arm/libUE4.so (_ZN16FNamedTaskThread23ProcessTasksNamedThreadEib+180)
02-16 10:20:24.881 629 629 F DEBUG : #11 pc 018efae0 /data/app/com.cigames.lotfbof-1/lib/arm/libUE4.so (_ZN16FNamedTaskThread21ProcessTasksUntilQuitEi+100)
02-16 10:20:24.881 629 629 F DEBUG : #12 pc 02d10a38 /data/app/com.cigames.lotfbof-1/lib/arm/libUE4.so (_ZN12FAudioThread3RunEv+84)
02-16 10:20:24.881 629 629 F DEBUG : #13 pc 01928808 /data/app/com.cigames.lotfbof-1/lib/arm/libUE4.so (_ZN22FRunnableThreadPThread3RunEv+100)
02-16 10:20:24.881 629 629 F DEBUG : #14 pc 018f24d8 /data/app/com.cigames.lotfbof-1/lib/arm/libUE4.so (_ZN22FRunnableThreadPThread11_ThreadProcEPv+104)
02-16 10:20:24.882 629 629 F DEBUG : #15 pc 0003fa3b /system/lib/libc.so (_ZL15__pthread_startPv+30)
02-16 10:20:24.882 629 629 F DEBUG : #16 pc 00019fe5 /system/lib/libc.so (__start_thread+6)
02-16 10:20:25.483 629 629 F DEBUG :
02-16 10:20:25.483 629 629 F DEBUG : Tombstone written to: /data/tombstones/tombstone_06
02-16 10:20:25.483 629 629 E DEBUG : AM write failed: Broken pipe
02-16 10:20:25.499 3674 3682 E ANDR-PERF-RESOURCEQS: Failed to apply optimization [4, 0]
02-16 10:20:25.600 1613 1878 E InputDispatcher: channel 'f40a44d com.cigames.lotfbof/com.epicgames.ue4.GameActivity (server)' ~ Channel is unrecoverably broken and will be disposed!
02-16 10:20:25.811 1613 3007 E libprocessgroup: failed to kill 1 processes for processgroup 23449
02-16 10:20:25.887 1613 3007 E WindowManager: Unknown window type: 1001

I specially installed Real Boxing for you and it's working fine. I also played in HOMM3 HD. Every app worked yet. Try to reinstall, then take it full permissions and turn on it.

I tried already and homm 3 Just run smooth and fine.
Maybe its a Problem with my Software.
Wicht Rom you have?
I am on eui 5.8 18s

I have 5.9.020s with x720.

Hm, I should Update soon
But I cant ota Update, due to root.
Have you unlocked the bootloader? And inatalled twrp?

No, full stock

There are some SElinux error in your log , and this error won't be fixed in bootimage . what a pity.

Soo nie i flashed 5.9 to my device and the game works Well, now i have flashed supersu and xposed and it is crashing again
Further more i Got werid random touches when i slide in my Screen after the Update?
Andy clues?

entchen66 said:
Soo nie i flashed 5.9 to my device and the game works Well, now i have flashed supersu and xposed and it is crashing again
Further more i Got werid random touches when i slide in my Screen after the Update?
Andy clues?
Click to expand...
Click to collapse
It's probably because of exposed uninstall it, it's not supported.:good:

But with you have so much adventages

Phone freezing while calling/audio problem?

My phone is freezing while in call, neither I or my caller can hear each other while this happens.
From logcat it looks like some kid of audio problem but I don't know what is the real problem.
Could anyone better than me in logs reading tell me how the fix this or what's causing this?
Code:
D/TelephonyProvider( 3294): subIdString = 1 subId = 1
I/FastMixerState(12846): sMaxFastTracks = 8
D/TelephonyProvider( 3294): subIdString = 1 subId = 1
I/audioserver(12846): ServiceManager: 0xf5c18540
D/vndksupport(12846): Loading /vendor/lib/hw/[email protected] from current namespace instead of sphal namespace.
D/vndksupport(12846): Loading /vendor/lib/hw/[email protected] from current namespace instead of sphal namespace.
I/AudioFlinger(12846): Using default 3000 mSec as standby time.
D/TelephonyProvider( 3294): subIdString = 1 subId = 1
W/APM::ConfigParsingUtils(12846): loadOutput() invalid supported devices
W/APM::ConfigParsingUtils(12846): loadInput() invalid supported devices
W/APM::ConfigParsingUtils(12846): loadInput() invalid supported devices
I/APM::ConfigParsingUtils(12846): loadAudioPolicyConfig() loaded /system/etc/audio_policy.conf
W/audio_hw_primary(12846): mixer_init: Failed to open mixer paths from /vendor/etc/mixer_paths_0.xml, retrying with legacy location
E/audio_route(12846): Control 'HPL Mixer ADCL Switch' doesn't exist - skipping
E/audio_route(12846): Control 'HPL Mixer ADCR Switch' doesn't exist - skipping
E/audio_route(12846): Control 'HPR Mixer ADCL Switch' doesn't exist - skipping
E/audio_route(12846): Control 'HPR Mixer ADCR Switch' doesn't exist - skipping
E/audio_route(12846): Control 'EP Mixer ADCL Switch' doesn't exist - skipping
E/audio_route(12846): Control 'EP Mixer ADCR Switch' doesn't exist - skipping
E/audio_route(12846): Control 'SPK Mixer ADCL Switch' doesn't exist - skipping
E/audio_route(12846): Control 'SPK Mixer ADCR Switch' doesn't exist - skipping
E/audio_route(12846): Control 'SPK Mixer ADCL Switch' doesn't exist - skipping
E/audio_route(12846): Control 'SPK Mixer ADCR Switch' doesn't exist - skipping
E/audio_route(12846): Control 'HPL Mixer ADCL Switch' doesn't exist - skipping
E/audio_route(12846): Control 'HPR Mixer ADCR Switch' doesn't exist - skipping
D/TelephonyProvider( 3294): subIdString = 1 subId = 1
E/audio_route(12846): Control 'EP EP On' already exists in path 'fm_radio-speaker-headset'
D/TelephonyProvider( 3294): subIdString = 1 subId = 1
V/audio_hw_voice(12846): voice_session_init: Forcing voice config: wide
E/audio_hw_primary(12846): Amplifier initialization failed
W/DeviceHAL(12846): Device 0xf5c3c400 get_master_volume: Function not implemented
W/DeviceHAL(12846): Device 0xf5c3c400 get_master_mute: Function not implemented
W/DeviceHAL(12846): Device 0xf5c3c400 set_master_volume: Function not implemented
W/DeviceHAL(12846): Device 0xf5c3c400 set_master_mute: Function not implemented
I/AudioFlinger(12846): loadHwModule() Loaded primary audio interface, handle 10
I/AudioFlinger(12846): openOutput() this 0xf5c3d000, module 10 Device 2, SamplingRate 48000, Format 0x000001, Channels 3, flags 2
I/AudioFlinger(12846): HAL output buffer size 256 frames, normal sink buffer size 768 frames
D/vndksupport(12846): Loading /vendor/lib/hw/[email protected] from current namespace instead of sphal namespace.
D/TelephonyProvider( 3294): subIdString = 1 subId = 1
I/ViPER4Android_v2(12846): Enter EffectGetDescriptor()
I/ViPER4Android_v2(12846): EffectGetDescriptor(), uuid = 41d3c987-e6cf-11e3-a88a-11aba5d5c51b
I/BufferProvider(12846): found effect "Multichannel Downmix To Stereo" from The Android Open Source Project
I/AudioFlinger(12846): Using module 10 as the primary audio interface
W/AudioFlinger(12846): moveEffects() bad srcOutput 0
I/AudioFlinger(12846): AudioFlinger's thread 0xf4c83a00 tid=12862 ready to run
W/AudioFlinger(12846): no wake lock to update, system not ready yet
W/AudioFlinger(12846): no wake lock to update, system not ready yet
I/AudioFlinger(12846): openOutput() this 0xf5c3d000, module 10 Device 2, SamplingRate 48000, Format 0x000001, Channels 3, flags 8
I/AudioFlinger(12846): HAL output buffer size 480 frames, normal sink buffer size 960 frames
I/AudioFlinger(12846): AudioFlinger's thread 0xf4603980 tid=12865 ready to run
W/AudioFlinger(12846): no wake lock to update, system not ready yet
W/AudioFlinger(12846): no wake lock to update, system not ready yet
I/AudioFlinger(12846): AudioFlinger's thread 0xf42032c0 tid=12867 ready to run
I/bt_a2dp_hw(12846): adev_open: adev_open in A2dp_hw module
I/AudioFlinger(12846): loadHwModule() Loaded a2dp audio interface, handle 18
D/vndksupport(12846): Loading /vendor/lib/hw/audio.usb.default.so from current namespace instead of sphal namespace.
D/TelephonyProvider( 3294): subIdString = 1 subId = 1
I/AudioFlinger(12846): loadHwModule() Loaded usb audio interface, handle 26
D/vndksupport(12846): Loading /vendor/lib/hw/audio.r_submix.default.so from current namespace instead of sphal namespace.
I/r_submix(12846): adev_open(name=audio_hw_if)
I/r_submix(12846): adev_init_check()
W/DeviceHAL(12846): Device 0xf4666640 set_master_mute: Function not implemented
I/AudioFlinger(12846): loadHwModule() Loaded r_submix audio interface, handle 34
D/r_submix(12846): adev_open_input_stream(addr=0)
D/r_submix(12846): submix_audio_device_create_pipe_l(addr=0, idx=9)
D/r_submix(12846): now using address 0 for route 9
I/AudioFlinger(12846): AudioFlinger's thread 0xf4203d80 tid=12871 ready to run
D/r_submix(12846): adev_close_input_stream()
D/r_submix(12846): submix_audio_device_release_pipe_l(idx=9) addr=0
D/r_submix(12846): submix_audio_device_destroy_pipe_l(): pipe destroyed
E/SoundTriggerHwService(12846): could not read implementation properties
D/TelephonyProvider( 3294): subIdString = 1 subId = 1
I/Telecom ( 2955): InCallController: Sending updateCall [[email protected], DIALING, com.android.phone/com.android.services.telephony.TelephonyConnectionService, tel:*********, A, childs(0), has_parent(false), [Capabilities: CAPABILITY_SUPPORT_HOLD CAPABILITY_MUTE CAPABILITY_CANNOT_DOWNGRADE_VIDEO_TO_AUDIO], [Properties:]]: [email protected]
I/Telecom ( 2955): InCallController: Components updated: [ComponentInfo{com.android.dialer/com.android.incallui.InCallServiceImpl}]: [email protected]
I/Dialer ( 6324): CallList.onUpdateCall - [DialerCall_1, DIALING, [Capabilities: CAPABILITY_SUPPORT_HOLD CAPABILITY_MUTE CAPABILITY_CANNOT_DOWNGRADE_VIDEO_TO_AUDIO], [Properties:], children:[], parent:null, conferenceable:[], videoState:Audio Only, mSessionModificationState:0, CameraDir:-1]
I/Dialer ( 6324): InCallPresenter.onCallListChange - Phone switching state: OUTGOING -> OUTGOING
I/Dialer ( 6324): VideoPauseController.onStateChange - hasPrimaryCallChanged: false, videoCanPause: false, isInBackground: false
I/Dialer ( 6324): InCallFragment.setSecondary - SecondaryInfo, show: false, name: null, label: null, providerLabel: null
W/ResourceType( 6324): Failure getting entry for 0x7f100292 (t=15 e=658) (error -75)
I/Dialer ( 6324): InCallFragment.setCallState - PrimaryCallState, state: 6, connectionLabel:
I/Dialer ( 6324): InCallActivity.onPrimaryCallStateChanged
I/Dialer ( 6324): InCallActivity.showMainInCallFragment - shouldShowAnswerUi: false, shouldShowVideoUi: false, didShowAnswerScreen: false, didShowInCallScreen: true, didShowVideoCallScreen: false
W/ResourceType( 6324): Failure getting entry for 0x7f100292 (t=15 e=658) (error -75)
I/Dialer ( 6324): InCallFragment.setCallState - PrimaryCallState, state: 6, connectionLabel:
I/Dialer ( 6324): InCallActivity.onPrimaryCallStateChanged
I/Dialer ( 6324): InCallActivity.showMainInCallFragment - shouldShowAnswerUi: false, shouldShowVideoUi: false, didShowAnswerScreen: false, didShowInCallScreen: true, didShowVideoCallScreen: false
I/AudioFlinger(12846): systemReady
D/PermissionCache(12846): checking android.permission.MODIFY_AUDIO_SETTINGS for uid=1000 => granted (1574 us)
E/AudioService( 2955): Audioserver started.
D/PermissionCache(12846): checking android.permission.CAPTURE_AUDIO_HOTWORD for uid=10181 => granted (340 us)
I/AudioFlinger(12846): AudioFlinger's thread 0xf3803c40 tid=12881 ready to run
I/audio_hw_primary(12846): adev_set_mode mode = 2
D/com.gsamlabs.bbm.lib.NotifyingService( 8880): ===:91:4309:41.4:1
V/audio_hw_voice(12846): prepare_voice_session: active_out_devices: 0x1
V/audio_hw_voice(12846): set_voice_session_audio_path: ril_set_call_audio_path(0)
I/rild ( 2512): type=1400 audit(0.0:1793): avc: denied { search } for name="12846" dev="proc" ino=87474 scontext=u:r:rild:s0 tcontext=u:r:audioserver:s0 tclass=dir permissive=1
I/rild ( 2512): type=1400 audit(0.0:1794): avc: denied { read } for name="cmdline" dev="proc" ino=87476 scontext=u:r:rild:s0 tcontext=u:r:audioserver:s0 tclass=file permissive=1
I/rild ( 2512): type=1400 audit(0.0:1795): avc: denied { open } for path="/proc/12846/cmdline" dev="proc" ino=87476 scontext=u:r:rild:s0 tcontext=u:r:audioserver:s0 tclass=file permissive=1
I/rild ( 2512): type=1400 audit(0.0:1796): avc: denied { getattr } for path="/proc/12846/cmdline" dev="proc" ino=87476 scontext=u:r:rild:s0 tcontext=u:r:audioserver:s0 tclass=file permissive=1
D/audio_route(12846): Apply path: voice-earpiece-wb
D/audio_route(12846): Apply path: voice-earpiece-mic-wb
V/audio_hw_voice(12846): start_voice_session: Opening voice PCMs
V/audio_hw_voice(12846): start_voice_session: pcm_config wideband
I/ActivityManager( 2955): Killing 10371:com.google.process.gapps/u0a113 (adj 906): empty #17
W/zygote ( 2955): kill(-10371, 9) failed: No such process
I/chatty ( 2955): uid=1000(system) ActivityManager identical 2 lines
W/zygote ( 2955): kill(-10371, 9) failed: No such process
I/zygote ( 2955): Successfully killed process cgroup uid 10113 pid 10371 in 135ms
E/BufferQueueProducer( 2475): [com.socialnmobile.dictapps.notepad.color.note/com.socialnmobile.colornote.activity.NoteEditor#0] disconnect: not connected (req=1)
W/libEGL (12010): EGLNativeWindowType 0xd3c7e008 disconnect failed
V/audio_hw_voice(12846): start_voice_session: enabling two mic control
F/libc (12846): Fatal signal 11 (SIGSEGV), code 1, fault addr 0x98 in tid 12889 (reader), pid 12846 (audioserver)
I/crash_dump32(12891): type=1400 audit(0.0:1797): avc: denied { noatsecure } for scontext=u:r:audioserver:s0 tcontext=u:r:crash_dump:s0 tclass=process permissive=1
I/crash_dump32(12893): obtaining output fd from tombstoned, type: kDebuggerdTombstone
I//system/bin/tombstoned( 2515): received crash request for pid 12846
I/crash_dump32(12893): performing dump of process 12846 (target tid = 12889)
F/DEBUG (12893): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
F/DEBUG (12893): AospExtended Version: 'v5.8'
F/DEBUG (12893): Build fingerprint: 'samsung/s5neoltexx/s5neolte:6.0.1/MMB29K/G903FXXU1BQC1:user/release-keys'
F/DEBUG (12893): Revision: '0'
F/DEBUG (12893): ABI: 'arm'
F/DEBUG (12893): pid: 12846, tid: 12889, name: reader >>> /system/bin/audioserver <<<
F/DEBUG (12893): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x98
F/DEBUG (12893): Cause: null pointer dereference
F/DEBUG (12893): r0 00000000 r1 00000160 r2 00000001 r3 f32dc2fc
F/DEBUG (12893): r4 00000160 r5 f5c3ca88 r6 f5c3ca58 r7 f5c3c400
F/DEBUG (12893): r8 f52993f0 r9 00000002 sl 000002c0 fp f5c3ca00
F/DEBUG (12893): ip f511fefc sp f3182880 lr f51189dc pc f50f40c4 cpsr 80070030
F/DEBUG (12893):
F/DEBUG (12893): backtrace:
F/DEBUG (12893): #00 pc 000020c4 /system/lib/libtinyalsa.so (pcm_bytes_to_frames+39)
F/DEBUG (12893): #01 pc 000079d8 /system/lib/hw/audio.primary.universal7580.so (in_read+792)
F/DEBUG (12893): #02 pc 0001f45d /system/vendor/lib/hw/[email protected] (android::hardware::audio::V2_0::implementation::(anonymous namespace)::ReadThread::threadLoop()+216)
F/DEBUG (12893): #03 pc 0000d1b9 /system/lib/libutils.so (android::Thread::_threadLoop(void*)+144)
F/DEBUG (12893): #04 pc 00047ecf /system/lib/libc.so (__pthread_start(void*)+22)
F/DEBUG (12893): #05 pc 0001af59 /system/lib/libc.so (__start_thread+32)
W/NativeCrashListener( 2955): Couldn't find ProcessRecord for pid 12846
E//system/bin/tombstoned( 2515): Tombstone written to: /data/tombstones/tombstone_21
I/BootReceiver( 2955): Copying /data/tombstones/tombstone_21 to DropBox (SYSTEM_TOMBSTONE)
W/AudioSystem( 3132): AudioPolicyService server died!
W/AudioSystem( 2955): AudioPolicyService server died!
W/AudioSystem( 2955): AudioFlinger server died!
W/AudioSystem( 3737): AudioPolicyService server died!
W/AudioSystem( 3737): AudioFlinger server died!
W/AudioRecord( 3737): dead IAudioRecord, creating a new one from obtainBuffer()
I/ServiceManager( 2341): service 'media.audio_flinger' died
I/ServiceManager( 2341): service 'media.audio_policy' died
I/ServiceManager( 2341): service 'media.sound_trigger_hw' died
I/ServiceManager( 3737): Waiting for service media.audio_flinger...
I/ServiceManager( 2955): Waiting for service media.audio_policy...
W/BroadcastQueue( 2955): Background execution not allowed: receiving Intent { act=android.intent.action.DROPBOX_ENTRY_ADDED flg=0x10 (has extras) } to com.google.android.gms/.stats.service.DropBoxEntryAddedReceiver
W/BroadcastQueue( 2955): Background execution not allowed: receiving Intent { act=android.intent.action.DROPBOX_ENTRY_ADDED flg=0x10 (has extras) } to com.google.android.gms/.chimera.GmsIntentOperationService$PersistentTrustedReceiver
I/ServiceManager( 3737): Waiting for service media.audio_flinger...
I/ServiceManager( 2955): Waiting for service media.audio_policy...
I/Xposed ( 3132): fsbi >> nc >> onDataChanged >> 0 > true > 75 > H+
I/ServiceManager( 3737): Waiting for service media.audio_flinger...
I/ServiceManager( 2955): Waiting for service media.audio_policy...
I/Xposed ( 3132): fsbi >> nc >> onDataChanged >> 0 > true > 50 > H+
I/ServiceManager( 3737): Waiting for service media.audio_flinger...
I/ServiceManager( 2955): Waiting for service media.audio_policy...
I/Telecom ( 2955): InCallController: Sending updateCall [[email protected], DIALING, com.android.phone/com.android.services.telephony.TelephonyConnectionService, tel:*********, A, childs(0), has_parent(false), [Capabilities: CAPABILITY_SUPPORT_HOLD CAPABILITY_MUTE CAPABILITY_CANNOT_DOWNGRADE_VIDEO_TO_AUDIO], [Properties:]]: [email protected]
I/Telecom ( 2955): InCallController: Components updated: [ComponentInfo{com.android.dialer/com.android.incallui.InCallServiceImpl}]: [email protected]
I/Telecom ( 2955): CallsManager: setCallState DIALING -> ACTIVE, call: [[email protected], DIALING, com.android.phone/com.android.services.telephony.TelephonyConnectionService, tel:*********, A, childs(0), has_parent(false), [Capabilities: CAPABILITY_SUPPORT_HOLD CAPABILITY_MUTE CAPABILITY_CANNOT_DOWNGRADE_VIDEO_TO_AUDIO], [Properties:]]: [email protected]

Trouble compiling 8.2.0 kernel from source for ShieldTV 2017

I am trying to compile the 8.2.0 Kernel for my Shield TV 2017. I am hoping to adding the Wireguard kernel module.
I downloaded the source linked from https://developer.nvidia.com/shield-open-source following the instructions links here https://nv-tegra.nvidia.com/gitweb/...7;hb=1a508fa42d6ae55ee0fe62a3e07559a484794108
The source code checks out fine. I set up my cross compiler by setting these environment variables
Code:
ARCH=arm64
SUBARCH=arm64
CROSS_COMPILE=/absolute/path/shield-open-source/prebuilts/gcc/linux-x86/aarch64/aarch64-linux-android-4.9/bin/aarch64-linux-android-
I removed the CONFIG_SYSTEM_TRUSTED_KEYS="signing_key.x509" from the tegra_android_defconfig file
I then went to ~/shield-open-source/kernel/kernel-4.9 and ran
Code:
make mrproper
make tegra_android_defconfig
make -j4
There were a few warnings that got flagged as errors and caused the build to failed. I modified the make files so the warnings wouldn't be flagged as errors (ex: ccflags-y += -Wno-error=maybe-uninitialized)
There is one more error with ~/shield-open-source/hardware/nvidia/platform/t210b01/ers/kernel-dts/ers-platforms/tegra210b01-ers-common.dtsi in that it can't find <tegra210b01-cpufreq.dtsi>. I changed this to include "darcy-platforms/tegra210b01-darcy-cpufreq.dtsi"
I also added Wireguard by following the kernel instructions from https://forum.xda-developers.com/android/development/wireguard-rom-integration-t3711635
At this point I am able build the Image.gz file. I took the boot.img from the recovery images that NVidia provides and used AndroidImageKitchen (https://forum.xda-developers.com/showthread.php?t=2073775) to unpack the boot.img, swap out boot.img-Image.gz with the one Image.gz that I compiled and re-packed the boot.img I flashed this boot.img to my device using fastboot, and the device never boots.
I have some logs from the bootloop - here is the snipit that seems most relevant but I don't really know what I am looking for or how to determine what needs to change
Code:
09-12 22:00:42.120 3384 3384 I ConfigStore: android::hardware::configstore::V1_0::ISurfaceFlingerConfigs::hasWideColorDisplay retrieved: 1
09-12 22:00:42.120 3384 3384 I ConfigStore: android::hardware::configstore::V1_0::ISurfaceFlingerConfigs::hasHDRDisplay retrieved: 1
09-12 22:00:42.120 3383 3383 E Netd : cannot find interface dummy0
09-12 22:00:42.120 3383 3383 I Netd : Initializing RouteController: 1.3ms
09-12 22:00:42.120 3384 3384 F libc : Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 in tid 3384 (surfaceflinger), pid 3384 (surfaceflinger)
09-12 22:00:42.120 3383 3383 D XfrmController: Sending Netlink XFRM Message: XFRM_MSG_FLUSHSA
09-12 22:00:42.120 3383 3383 D XfrmController: Sending Netlink XFRM Message: XFRM_MSG_FLUSHPOLICY
09-12 22:00:42.120 3383 3383 I Netd : Initializing XfrmController: 0.2ms
09-12 22:00:42.121 3383 3383 I Netd : Registering NetdNativeService: 0.5ms
09-12 22:00:42.122 3383 3383 I Netd : Starting CommandListener: 0.1ms
09-12 22:00:42.123 3383 3383 I Netd : Registering NetdHwService: 1.0ms
09-12 22:00:42.123 3383 3383 I Netd : Netd started in 219ms
09-12 22:00:42.132 3378 3378 D Zygote : begin preload
09-12 22:00:42.132 3378 3378 I Zygote : Installing ICU cache reference pinning...
09-12 22:00:42.132 3378 3378 I Zygote : Preloading ICU data...
09-12 22:00:42.135 3379 3379 I Zygote : Accepting command socket connections
09-12 22:00:42.138 3378 3378 I Zygote : Preloading classes...
09-12 22:00:42.140 3436 3436 I crash_dump64: obtaining output fd from tombstoned, type: kDebuggerdTombstone
09-12 22:00:42.140 3184 3184 I /system/bin/tombstoned: received crash request for pid 3384
09-12 22:00:42.141 3436 3436 I crash_dump64: performing dump of process 3384 (target tid = 3384)
09-12 22:00:42.143 3436 3436 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
09-12 22:00:42.143 3436 3436 F DEBUG : Build fingerprint: 'NVIDIA/darcy/darcy:9/PPR1.180610.011/4079208_2235.1395:user/release-keys'
09-12 22:00:42.143 3436 3436 F DEBUG : Revision: '0'
09-12 22:00:42.143 3436 3436 F DEBUG : ABI: 'arm64'
09-12 22:00:42.143 3436 3436 F DEBUG : pid: 3384, tid: 3384, name: surfaceflinger >>> /system/bin/surfaceflinger <<<
09-12 22:00:42.143 3436 3436 F DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0
09-12 22:00:42.143 3436 3436 F DEBUG : Cause: null pointer dereference
09-12 22:00:42.143 3436 3436 F DEBUG : x0 0000000000000000 x1 0000000000000000 x2 0000000000000000 x3 00000025b1c537d0
09-12 22:00:42.143 3436 3436 F DEBUG : x4 0000000000000000 x5 0000007fe38db898 x6 0000000000000000 x7 0000000000000030
09-12 22:00:42.143 3436 3436 F DEBUG : x8 0101010101010101 x9 b72fc0062f2280b8 x10 000000005f647079 x11 0000000000000000
09-12 22:00:42.143 3436 3436 F DEBUG : x12 0000000000000001 x13 0000000000000000 x14 0000000000000001 x15 00000025b1c81a88
09-12 22:00:42.143 3436 3436 F DEBUG : x16 000000252f3b9e58 x17 00000025307de610 x18 0000000000000001 x19 00000025b1c537d0
09-12 22:00:42.143 3436 3436 F DEBUG : x20 0000000000000000 x21 0000000000000000 x22 000000252ed0c5e0 x23 0000000000000000
09-12 22:00:42.143 3436 3436 F DEBUG : x24 0000000000000001 x25 0000007fe38dbb00 x26 00000000000f4240 x27 0000007fe38dbb00
09-12 22:00:42.143 3436 3436 F DEBUG : x28 0000007fe38dba90 x29 0000007fe38db900
09-12 22:00:42.143 3436 3436 F DEBUG : sp 0000007fe38db8e0 lr 000000252f396f78 pc 00000025307de620
09-12 22:00:42.146 3378 3378 I PackageBackwardCompatibility: Loaded android.content.pm.OrgApacheHttpLegacyUpdater
Any pointers to what I am doing wrong, or how to further debug would be appreciated.
Also if there is already a kernel built with Wireguard support, a reference to that would be :good:

Hi, I've compiled kernel for Shield 2017 following your steps and I'm probably facing same issue. My boot hangs on Nvidia logo. I have a question - how you've obtained boot logs? ADB don't work from fastboot menu for me.

Hi, did you finally succeed in compiling a kernel for shield 2017 ?