diff options
| author | Jeff Vander Stoep <jeffv@google.com> | 2017-05-16 15:08:14 -0700 |
|---|---|---|
| committer | android-build-team Robot <android-build-team-robot@google.com> | 2017-05-17 21:09:29 +0000 |
| commit | 8cf6a4d33b720c25cf7ca65b1ae829d6a24b851a (patch) | |
| tree | e56fbbca19a0e636d5abb093b8ff947bf0783e37 | |
| parent | 4729470b2ba9acdb8a39bd18eced65e5b8a31af2 (diff) | |
| download | bullhead-8cf6a4d33b720c25cf7ca65b1ae829d6a24b851a.tar.gz | |
thermal-engine: allow access to sys/class/leds
Logd was hiding a bunch of these denials. Commit
982ad208b5e4d83f966ee4c10ad4f606417bcda6 in AOSP master fixed this
issue and now we're seeing them. Backport the fix to oc-dev where
these denials are occurring unnoticed.
avc: denied { search } for comm="thermal-engine" name="leds" dev="sysfs"
ino=7453 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_leds:s0 tclass=dir permissive=0
avc: denied { read } for comm="thermal-engine" name="lcd-backlight"
dev="sysfs" ino=12242 scontext=u:r:thermal-engine:s0
tcontext=u:object_r:sysfs_leds:s0 tclass=lnk_file
Bug: 38341453
Test: build and boot bullhead. Denials no longer occur.
Change-Id: I79079659f82a3d97a609d1a7f8009fec2eda1102
(cherry picked from commit 38aabadbf544cf0cd1b72aae8ee2e4d157994aa7)
| -rw-r--r-- | sepolicy/thermal-engine.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sepolicy/thermal-engine.te b/sepolicy/thermal-engine.te index 42cff18..93c2179 100644 --- a/sepolicy/thermal-engine.te +++ b/sepolicy/thermal-engine.te @@ -27,3 +27,4 @@ allow thermal-engine sysfs_thermal:file rw_file_perms; allow thermal-engine sysfs_thermal:lnk_file read; r_dir_file(thermal-engine, sysfs_ssr) +r_dir_file(thermal-engine, sysfs_leds) |