diff options
| author | Jabiyeff <cebiyevanar@gmail.com> | 2021-04-15 12:22:21 +0400 |
|---|---|---|
| committer | Semavi Ulusoy <doc.divxm@gmail.com> | 2021-07-04 16:08:59 +0300 |
| commit | 94d57a40255102071044143b7b505aa627839217 (patch) | |
| tree | abe3d02dd2f0bc8679a53c3620fd84c116e3d57c | |
| parent | 5c8a9f4498ce8f5249d54d69f44aaae4ab0e63b4 (diff) | |
updater_app: Address cache_file denials
crdroid.updater: type=1400 audit(0.0:3984): avc: denied { create } for name="uncrypt_file" scontext=u:r:updater_app:s0:c512,c768 tcontext=u:object_r:cache_file:s0:c512,c768 tclass=file permissive=0 app=com.crdroid.updater
Signed-off-by: Jabiyeff <cebiyevanar@gmail.com>
Change-Id: I129b9bc4c28ade3d4738a5ad1945dc3fa347acd5
| -rw-r--r-- | common/private/updater_app.te | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/common/private/updater_app.te b/common/private/updater_app.te index ca73ec1..fe0fd2f 100644 --- a/common/private/updater_app.te +++ b/common/private/updater_app.te @@ -5,3 +5,5 @@ r_dir_file(updater_app, storage_file) # Allow to install OTA's from local storage allow updater_app backuptool:process noatsecure; allow updater_app media_rw_data_file:file { open read write getattr }; + +allow updater_app cache_file:file create_file_perms; |