diff options
| author | Larry Liang <yu.liang@mediatek.com> | 2020-02-21 16:44:59 +0800 |
|---|---|---|
| committer | Gerrit Code Review <gerrit@mediatek.com> | 2020-02-21 16:44:59 +0800 |
| commit | d6ba988219522b525cd9d1768a33815219be81c9 (patch) | |
| tree | e1746607a3b8a5eb4918827bbe8c30bdc34ddf1c | |
| parent | 8da68be0e9199f8bd2853f0699dfbfbf71a3f91e (diff) | |
| parent | 4544e105fb278b6d91548aa41cfd661eb2154b36 (diff) | |
| download | device_mediatek_wembley-sepolicy-d6ba988219522b525cd9d1768a33815219be81c9.tar.gz device_mediatek_wembley-sepolicy-d6ba988219522b525cd9d1768a33815219be81c9.tar.bz2 device_mediatek_wembley-sepolicy-d6ba988219522b525cd9d1768a33815219be81c9.zip | |
Merge "[ALPS04975618] fix dumpstate xTS fail" into alps-trunk-r0.basic
| -rw-r--r-- | non_plat/dumpstate.te | 2 | ||||
| -rw-r--r-- | r_non_plat/dumpstate.te | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/non_plat/dumpstate.te b/non_plat/dumpstate.te index 01343a5..25bcca9 100644 --- a/non_plat/dumpstate.te +++ b/non_plat/dumpstate.te @@ -178,4 +178,4 @@ allow dumpstate mtee_trusty_file:file rw_file_perms; # 09-05 15:58:31.552000 9693 9693 W df : type=1400 audit(0.0:990): # avc: denied { search } for name="expand" dev="tmpfs" ino=10779 scontext=u:r:dumpstate:s0 # tcontext=u:object_r:mnt_expand_file:s0 tclass=dir permissive=0 -allow dumpstate mnt_expand_file:dir search; +allow dumpstate mnt_expand_file:dir { search getattr }; diff --git a/r_non_plat/dumpstate.te b/r_non_plat/dumpstate.te index 84e28c3..3243d93 100644 --- a/r_non_plat/dumpstate.te +++ b/r_non_plat/dumpstate.te @@ -178,7 +178,7 @@ allow dumpstate mtee_trusty_file:file rw_file_perms; # 09-05 15:58:31.552000 9693 9693 W df : type=1400 audit(0.0:990): # avc: denied { search } for name="expand" dev="tmpfs" ino=10779 scontext=u:r:dumpstate:s0 # tcontext=u:object_r:mnt_expand_file:s0 tclass=dir permissive=0 -allow dumpstate mnt_expand_file:dir search; +allow dumpstate mnt_expand_file:dir { search getattr }; #Purpose: Allow dumpstate to read /dev/usb-ffs allow dumpstate functionfs:file { getattr }; |