diff options
author | Adam Shih <adamshih@google.com> | 2021-05-14 11:26:37 +0800 |
---|---|---|
committer | Adam Shih <adamshih@google.com> | 2021-05-14 11:26:37 +0800 |
commit | 2f414056f504325eb38d640ce32d3ec77dcfe02e (patch) | |
tree | ad06bb440b0e07d09be69dbb2d89cd24d8ac76ac /vendor | |
parent | 3caf8446153fdf9638e091ba24b99c5e26b0c143 (diff) | |
download | sunfish-sepolicy-2f414056f504325eb38d640ce32d3ec77dcfe02e.tar.gz |
allow pd_mapper to read dmesgandroid-s-beta-2android-s-beta-1
05-12 13:18:16.449 1095 1095 I auditd : type=1400 audit(0.0:7): avc: denied { getattr } for comm="pd-mapper" path="/dev/kmsg" dev="tmpfs" ino=17807 scontext=u:r:vendor_pd_mapper:s0 tcontext=u:object_r:kmsg_device:s0 tclass=chr_file permissive=0
Bug: 177335164
Test: boot to home with no avc error
Change-Id: Ia076cca5a5335063edc31990fca7a51fedf117b7
Diffstat (limited to 'vendor')
-rw-r--r-- | vendor/qcom/common/pd_services.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/vendor/qcom/common/pd_services.te b/vendor/qcom/common/pd_services.te index 3f48cef..b504a16 100644 --- a/vendor/qcom/common/pd_services.te +++ b/vendor/qcom/common/pd_services.te @@ -6,7 +6,7 @@ init_daemon_domain(vendor_pd_mapper); allow vendor_pd_mapper self:qipcrtr_socket create_socket_perms_no_ioctl; userdebug_or_eng(` - allow vendor_pd_mapper kmsg_device:chr_file w_file_perms; + allow vendor_pd_mapper kmsg_device:chr_file rw_file_perms; ') dontaudit vendor_pd_mapper sysfs_esoc:dir search; |