Shell needs to read /storage/self/primary symlink.

avc: denied { read } for name="primary" dev="tmpfs" ino=3134 scontext=u:r:shell:s0 tcontext=u:object_r:storage_file:s0 tclass=lnk_file

Change-Id: Id0ed2297a89054199fc73f27b18f717ae19c6778

1 files changed, 3 insertions, 0 deletions

diff --git a/shell.te b/shell.te
index cfadf77..e7d03e8 100644
--- a/shell.te
+++ b/shell.te
@@ -74,3 +74,6 @@ allow shell domain:process getattr;
 # and read other files created by init process under /data/bootchart
 allow shell bootchart_data_file:dir rw_dir_perms;
 allow shell bootchart_data_file:file create_file_perms;
+
+# Follow the /storage/self/primary symlink
+allow appdomain storage_file:lnk_file r_file_perms;