summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAdam Shih <adamshih@google.com>2018-07-20 16:54:48 +0800
committerandroid-build-team Robot <android-build-team-robot@google.com>2018-07-23 23:00:23 +0000
commit7c6c568ab4f20786601e9558f8359bdb9399ce01 (patch)
tree5ee17507bea16ef88f9fad01773dba616927666a
parent83b84dd05c32f70e6c0821ae5f207eb91dadc22a (diff)
allow ueventd access lnk_file
[ 384.817844] type=1400 audit(1230768355.790:250): avc: denied { read } for pid=2980 comm="ueventd" name="firmware" dev="sda5" ino=3293 scontext=u:r:ueventd:s0 tcontext=u:object_r:firmware_file:s0 tclass=lnk_file permissive=1 Bug: 111287060 Test: Flash error combination image on bug and modify sepolicy, and found the issue gone Change-Id: I72c798f539b8243585047067c3be44a7dad7a9d4 (cherry picked from commit 8ceb4ca4f26785d9e39fd73fbd2d7b1d472239bb)
-rw-r--r--vendor/qcom/common/ueventd.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/vendor/qcom/common/ueventd.te b/vendor/qcom/common/ueventd.te
index e7799ab..f0a175d 100644
--- a/vendor/qcom/common/ueventd.te
+++ b/vendor/qcom/common/ueventd.te
@@ -12,6 +12,7 @@ allow ueventd sysfs_net:file w_file_perms;
allow ueventd sysfs_msm_subsys:file w_file_perms;
allow ueventd sysfs_bluetooth_writable:file w_file_perms;
allow ueventd sysfs_usb_c:file w_file_perms;
+allow ueventd firmware_file:lnk_file read;
allow ueventd firmware_file:dir search;
allow ueventd firmware_file:file r_file_perms;
allow ueventd tmpfs:blk_file getattr;