diff options
| author | Jeff Vander Stoep <jeffv@google.com> | 2016-02-01 13:08:17 -0800 |
|---|---|---|
| committer | Jeffrey Vander Stoep <jeffv@google.com> | 2016-02-01 21:15:01 +0000 |
| commit | a89e96913c7e40e3c7fa87ba954c1e5e74d957a8 (patch) | |
| tree | f897a60941489cc0e90cfea3eca2b8b8b2e72865 | |
| parent | a42332b76aa9e1a1fe22075f1e5951a9a7f0102d (diff) | |
| download | hikey-a89e96913c7e40e3c7fa87ba954c1e5e74d957a8.tar.gz | |
init: allow access to /config for USB setup
Addresses:
avc: denied { write } for name="usb_gadget" dev="configfs" ino=3140 scontext=u:r:init:s0 tcontext=u:object_r:configfs:s0 tclass=dir
avc: denied { add_name } for name="g1" scontext=u:r:init:s0 tcontext=u:object_r:configfs:s0 tclass=dir
avc: denied { create } for name="g1" scontext=u:r:init:s0 tcontext=u:object_r:configfs:s0 tclass=dir
avc: denied { write } for name="idVendor" dev="configfs" ino=5136 scontext=u:r:init:s0 tcontext=u:object_r:configfs:s0 tclass=file
avc: denied { create } for name="b.1" scontext=u:r:init:s0 tcontext=u:object_r:configfs:s0 tclass=lnk_file
avc: denied { create } for name="f1" scontext=u:r:init:s0 tcontext=u:object_r:configfs:s0 tclass=lnk_file
Bug: 26904332
Change-Id: Ic9ca1730c6428f430639618caf9443f42f948e86
| -rw-r--r-- | sepolicy/init.te | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sepolicy/init.te b/sepolicy/init.te new file mode 100644 index 00000000..cd0bcac4 --- /dev/null +++ b/sepolicy/init.te @@ -0,0 +1,4 @@ +# init.hikey.usb.rc writes to /config/* to set up USB +allow init configfs:dir create_file_perms; +allow init configfs:file write; +allow init configfs:lnk_file create; |