summaryrefslogtreecommitdiff
path: root/vendor
diff options
context:
space:
mode:
authorAdam Shih <adamshih@google.com>2021-05-14 11:26:37 +0800
committerAdam Shih <adamshih@google.com>2021-05-14 11:26:37 +0800
commit2f414056f504325eb38d640ce32d3ec77dcfe02e (patch)
treead06bb440b0e07d09be69dbb2d89cd24d8ac76ac /vendor
parent3caf8446153fdf9638e091ba24b99c5e26b0c143 (diff)
downloadsunfish-sepolicy-2f414056f504325eb38d640ce32d3ec77dcfe02e.tar.gz
allow pd_mapper to read dmesgandroid-s-beta-2android-s-beta-1
05-12 13:18:16.449 1095 1095 I auditd : type=1400 audit(0.0:7): avc: denied { getattr } for comm="pd-mapper" path="/dev/kmsg" dev="tmpfs" ino=17807 scontext=u:r:vendor_pd_mapper:s0 tcontext=u:object_r:kmsg_device:s0 tclass=chr_file permissive=0 Bug: 177335164 Test: boot to home with no avc error Change-Id: Ia076cca5a5335063edc31990fca7a51fedf117b7
Diffstat (limited to 'vendor')
-rw-r--r--vendor/qcom/common/pd_services.te2
1 files changed, 1 insertions, 1 deletions
diff --git a/vendor/qcom/common/pd_services.te b/vendor/qcom/common/pd_services.te
index 3f48cef..b504a16 100644
--- a/vendor/qcom/common/pd_services.te
+++ b/vendor/qcom/common/pd_services.te
@@ -6,7 +6,7 @@ init_daemon_domain(vendor_pd_mapper);
allow vendor_pd_mapper self:qipcrtr_socket create_socket_perms_no_ioctl;
userdebug_or_eng(`
- allow vendor_pd_mapper kmsg_device:chr_file w_file_perms;
+ allow vendor_pd_mapper kmsg_device:chr_file rw_file_perms;
')
dontaudit vendor_pd_mapper sysfs_esoc:dir search;