a32: sepolicy: Fixup vendor_init cgroup denials
avc: denied { getattr } for path="/dev/cpuset/cpus" dev="cgroup" ino=8 scontext=u:r:vendor_init:s0 tcontext=u:object_r:cgroup:s0 tclass=file permissive=0
avc: denied { getattr } for path="/dev/cpuset/mems" dev="cgroup" ino=9 scontext=u:r:vendor_init:s0 tcontext=u:object_r:cgroup:s0 tclass=file permissive=0
This commit is contained in:
parent
96e4d0c27b
commit
357f8cf14c
1 changed files with 1 additions and 2 deletions
3
sepolicy/vendor/vendor_init.te
vendored
3
sepolicy/vendor/vendor_init.te
vendored
|
|
@ -8,8 +8,7 @@ set_prop(vendor_init, vendor_camera_prop)
|
|||
set_prop(vendor_init, vendor_members_prop)
|
||||
set_prop(vendor_init, exported_radio_prop)
|
||||
|
||||
allow vendor_init cgroup:dir create_dir_perms;
|
||||
allow vendor_init cgroup:file w_file_perms;
|
||||
allow vendor_init cgroup:file getattr;
|
||||
allow vendor_init unlabeled:{
|
||||
file
|
||||
dir
|
||||
|
|
|
|||
Loading…
Reference in a new issue