diff options
| author | SalmaxChang <salmaxchang@google.com> | 2021-06-17 15:29:58 +0800 |
|---|---|---|
| committer | SalmaxChang <salmaxchang@google.com> | 2021-06-17 15:29:58 +0800 |
| commit | 63b4165791a11004e3bf0c618c5579332bf3c18e (patch) | |
| tree | 296cfcf4835a960cec616a4bc13d140f0dd1cba0 /vendor | |
| parent | 5a8c0c66348f710ed9f9742476307c6825713413 (diff) | |
| download | sunfish-sepolicy-63b4165791a11004e3bf0c618c5579332bf3c18e.tar.gz | |
rfs_access: fix avc errors
avc: denied { dac_read_search } for comm="tftp_server" capability=2 scontext=u:r:rfs_access:s0 tcontext=u:r:rfs_access:s0 tclass=capability permissive=0
avc: denied { dac_override } for comm="tftp_server" capability=1 scontext=u:r:rfs_access:s0 tcontext=u:r:rfs_access:s0 tclass=capability permissive=0
Bug: 189167816
Change-Id: Ie694865a835f87c3cdd37418178734ebba24cb99
Diffstat (limited to 'vendor')
| -rw-r--r-- | vendor/qcom/common/rfs_access.te | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/vendor/qcom/common/rfs_access.te b/vendor/qcom/common/rfs_access.te index 97d138d..14cb6a7 100644 --- a/vendor/qcom/common/rfs_access.te +++ b/vendor/qcom/common/rfs_access.te @@ -17,3 +17,5 @@ allow rfs_access rfs_tombstone_data_file:file create_file_perms; allow rfs_access self:qipcrtr_socket create_socket_perms_no_ioctl; wakelock_use(rfs_access) + +dontaudit rfs_access self:capability { dac_override dac_read_search }; |