diff options
| author | Vladimir Oltean <olteanv@gmail.com> | 2018-09-25 14:40:30 +0300 |
|---|---|---|
| committer | Bruno Martins <bgcngm@gmail.com> | 2018-11-25 18:33:02 +0100 |
| commit | 25b6ab3f932d821281893123a37f6d6c3621b17b (patch) | |
| tree | 9c43e987d1e3bfd50cd7caa7f4231b43cd8372a7 /legacy-common | |
| parent | fa38396e418828291eec3c41eaa0924bd935816f (diff) | |
| download | android_device_qcom_sepolicy-legacy-25b6ab3f932d821281893123a37f6d6c3621b17b.tar.gz android_device_qcom_sepolicy-legacy-25b6ab3f932d821281893123a37f6d6c3621b17b.tar.bz2 android_device_qcom_sepolicy-legacy-25b6ab3f932d821281893123a37f6d6c3621b17b.zip | |
legacy: allow init to read /proc/device-tree
* Solves denials:
avc: denied { read } for pid=1 comm="init" name="compatible" dev="proc"
scontext=u:r:init:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=1
avc: denied { open } for pid=1 comm="init" path="/proc/device-tree/firmware/android/compatible"
dev="proc" scontext=u:r:init:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=1
avc: denied { getattr } for pid=1 comm="init" path="/proc/device-tree/firmware/android/compatible"
dev="proc" scontext=u:r:init:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=1
Change-Id: Ib5543f3f4d0e6a723a0f45621d607f9b9a25d08f
Signed-off-by: Vladimir Oltean <olteanv@gmail.com>
Diffstat (limited to 'legacy-common')
| -rw-r--r-- | legacy-common/genfs_contexts | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/legacy-common/genfs_contexts b/legacy-common/genfs_contexts index f94e9eb..4781836 100644 --- a/legacy-common/genfs_contexts +++ b/legacy-common/genfs_contexts @@ -1 +1,3 @@ genfscon debugfs /rmt_storage u:object_r:debugfs_rmt:s0 + +genfscon proc /device-tree/firmware/android u:object_r:sysfs_dt_firmware_android:s0 |