diff options
| author | Huaiming Li <huaiming.li@mediatek.com> | 2020-02-20 13:37:51 +0800 |
|---|---|---|
| committer | Huaiming Li <huaiming.li@mediatek.com> | 2020-02-20 13:37:51 +0800 |
| commit | 4544e105fb278b6d91548aa41cfd661eb2154b36 (patch) | |
| tree | 8990bd91a5a36bde76132dc729690437adf5a3fb | |
| parent | d8ebd12615b8284cbc4742756e848c5c928e2946 (diff) | |
| download | device_mediatek_wembley-sepolicy-4544e105fb278b6d91548aa41cfd661eb2154b36.tar.gz device_mediatek_wembley-sepolicy-4544e105fb278b6d91548aa41cfd661eb2154b36.tar.bz2 device_mediatek_wembley-sepolicy-4544e105fb278b6d91548aa41cfd661eb2154b36.zip | |
[ALPS04975618] fix dumpstate xTS fail
1. mnt_expand_file no getattr selinux rule
Change-Id: I14a31e6b4f778270ae1a684a5c1ea1407f4d6786
CR-Id: ALPS04975618
Feature: Android Exception Engine(AEE)
| -rw-r--r-- | non_plat/dumpstate.te | 2 | ||||
| -rw-r--r-- | r_non_plat/dumpstate.te | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/non_plat/dumpstate.te b/non_plat/dumpstate.te index 01343a5..25bcca9 100644 --- a/non_plat/dumpstate.te +++ b/non_plat/dumpstate.te @@ -178,4 +178,4 @@ allow dumpstate mtee_trusty_file:file rw_file_perms; # 09-05 15:58:31.552000 9693 9693 W df : type=1400 audit(0.0:990): # avc: denied { search } for name="expand" dev="tmpfs" ino=10779 scontext=u:r:dumpstate:s0 # tcontext=u:object_r:mnt_expand_file:s0 tclass=dir permissive=0 -allow dumpstate mnt_expand_file:dir search; +allow dumpstate mnt_expand_file:dir { search getattr }; diff --git a/r_non_plat/dumpstate.te b/r_non_plat/dumpstate.te index 84e28c3..3243d93 100644 --- a/r_non_plat/dumpstate.te +++ b/r_non_plat/dumpstate.te @@ -178,7 +178,7 @@ allow dumpstate mtee_trusty_file:file rw_file_perms; # 09-05 15:58:31.552000 9693 9693 W df : type=1400 audit(0.0:990): # avc: denied { search } for name="expand" dev="tmpfs" ino=10779 scontext=u:r:dumpstate:s0 # tcontext=u:object_r:mnt_expand_file:s0 tclass=dir permissive=0 -allow dumpstate mnt_expand_file:dir search; +allow dumpstate mnt_expand_file:dir { search getattr }; #Purpose: Allow dumpstate to read /dev/usb-ffs allow dumpstate functionfs:file { getattr }; |