Allow reading of properties area, which is now created before init has switched contexts. Revisit this later - we should explicitly label the properties file.

1 files changed, 4 insertions, 0 deletions

diff --git a/shell.te b/shell.te
index e7e3b35..a66eaf4 100644
--- a/shell.te
+++ b/shell.te
@@ -13,6 +13,10 @@ allow shell shell_data_file:dir create_dir_perms;
 allow shell shell_data_file:file create_file_perms;
 allow shell shell_data_file:file rx_file_perms;
 
+# Read properties.
+allow shell kernel:fd use;
+allow shell tmpfs:file read;
+
 r_dir_file(shell, apk_data_file)
 allow shell dalvikcache_data_file:file write;