aboutsummaryrefslogtreecommitdiffstats
path: root/shell.te
diff options
context:
space:
mode:
authorStephen Smalley <sds@tycho.nsa.gov>2014-06-11 12:09:15 -0400
committerStephen Smalley <sds@tycho.nsa.gov>2014-06-12 09:50:00 -0400
commita2e4e2656bfdd0bb002123c0e1da893831a47b82 (patch)
tree983f164904d9689cfd996e13ed9f3baa617f5a99 /shell.te
parent62af83810baa7a6c07a8673136c1cdf5a6763b48 (diff)
downloadandroid_external_sepolicy-a2e4e2656bfdd0bb002123c0e1da893831a47b82.tar.gz
android_external_sepolicy-a2e4e2656bfdd0bb002123c0e1da893831a47b82.tar.bz2
android_external_sepolicy-a2e4e2656bfdd0bb002123c0e1da893831a47b82.zip
Allow shell to read/search /dev/input directory.
Resolves denials such as: avc: denied { read } for pid=16758 comm="getevent" name="input" dev="tmpfs" ino=6018 scontext=u:r:shell:s0 tcontext=u:object_r:input_device:s0 tclass=dir Change-Id: I709bd20a03a5271382b191393d55a34b0b8e4e0c Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'shell.te')
-rw-r--r--shell.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/shell.te b/shell.te
index 6df9c85..aa02ce5 100644
--- a/shell.te
+++ b/shell.te
@@ -29,6 +29,7 @@ allow shell rootfs:dir r_dir_perms;
allow shell devpts:chr_file rw_file_perms;
allow shell tty_device:chr_file rw_file_perms;
allow shell console_device:chr_file rw_file_perms;
+allow shell input_device:dir r_dir_perms;
allow shell input_device:chr_file rw_file_perms;
allow shell system_file:file x_file_perms;
allow shell shell_exec:file rx_file_perms;