diff options
| author | Alan Stokes <alanstokes@google.com> | 2022-08-26 12:24:04 +0300 |
|---|---|---|
| committer | Alex Tsanis <alex@dragongr.dev> | 2022-08-28 12:08:58 +0300 |
| commit | 8eae27f7f0437e8cf6a1a8856bde08870aaca5fd (patch) | |
| tree | a2d19d3f1cde1ad20e2ea481c8ba5bea199ccd4d /gpt-utils/gpt-utils.cpp | |
| parent | d1afcc50bc20a67b21b3d7a4985a14bd9d14dbba (diff) | |
It runs as system, but data/vendor/tombstone is writeable only by
root, so we get init to create the initial directory. rfs_access then
creates sub-directories.
Denials:
denied { write } for name="rfs" dev="sda19" ino=51687 scontext=u:r:rfs_access:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir
denied { add_name } for name="modem" scontext=u:r:rfs_access:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir
denied { create } for name="modem" scontext=u:r:rfs_access:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir
denied { setattr } for name="modem" dev="sda19" ino=51689 scontext=u:r:rfs_access:s0 tcontext=u:object_r:vendor_data_file:s0 tclass=dir
Bug: 72643420
Test: Device boots, denials gone.
Change-Id: Ia5fba7aa59ee52367f72ce4ee337298d1c7ae915
Diffstat (limited to 'gpt-utils/gpt-utils.cpp')
0 files changed, 0 insertions, 0 deletions