summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAdam Shih <adamshih@google.com>2018-07-20 16:54:48 +0800
committerAdam Shih <adamshih@google.com>2018-07-20 16:56:44 +0800
commit8ceb4ca4f26785d9e39fd73fbd2d7b1d472239bb (patch)
tree5ee17507bea16ef88f9fad01773dba616927666a
parentce795d1585ffbb5c912054155cc560af7037e64c (diff)
allow ueventd access lnk_file
[ 384.817844] type=1400 audit(1230768355.790:250): avc: denied { read } for pid=2980 comm="ueventd" name="firmware" dev="sda5" ino=3293 scontext=u:r:ueventd:s0 tcontext=u:object_r:firmware_file:s0 tclass=lnk_file permissive=1 Bug: 111287060 Test: Flash error combination image on bug and modify sepolicy, and found the issue gone Change-Id: I72c798f539b8243585047067c3be44a7dad7a9d4
-rw-r--r--vendor/qcom/common/ueventd.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/vendor/qcom/common/ueventd.te b/vendor/qcom/common/ueventd.te
index e7799ab..f0a175d 100644
--- a/vendor/qcom/common/ueventd.te
+++ b/vendor/qcom/common/ueventd.te
@@ -12,6 +12,7 @@ allow ueventd sysfs_net:file w_file_perms;
allow ueventd sysfs_msm_subsys:file w_file_perms;
allow ueventd sysfs_bluetooth_writable:file w_file_perms;
allow ueventd sysfs_usb_c:file w_file_perms;
+allow ueventd firmware_file:lnk_file read;
allow ueventd firmware_file:dir search;
allow ueventd firmware_file:file r_file_perms;
allow ueventd tmpfs:blk_file getattr;