From 357f8cf14cc61601c40c2e8055a9823ce817bddd Mon Sep 17 00:00:00 2001 From: AndroidHQ254 Date: Sun, 12 May 2024 18:59:05 +0300 Subject: [PATCH] a32: sepolicy: Fixup vendor_init cgroup denials avc: denied { getattr } for path="/dev/cpuset/cpus" dev="cgroup" ino=8 scontext=u:r:vendor_init:s0 tcontext=u:object_r:cgroup:s0 tclass=file permissive=0 avc: denied { getattr } for path="/dev/cpuset/mems" dev="cgroup" ino=9 scontext=u:r:vendor_init:s0 tcontext=u:object_r:cgroup:s0 tclass=file permissive=0 --- sepolicy/vendor/vendor_init.te | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/sepolicy/vendor/vendor_init.te b/sepolicy/vendor/vendor_init.te index fbee389..2ccfec3 100644 --- a/sepolicy/vendor/vendor_init.te +++ b/sepolicy/vendor/vendor_init.te @@ -8,8 +8,7 @@ set_prop(vendor_init, vendor_camera_prop) set_prop(vendor_init, vendor_members_prop) set_prop(vendor_init, exported_radio_prop) -allow vendor_init cgroup:dir create_dir_perms; -allow vendor_init cgroup:file w_file_perms; +allow vendor_init cgroup:file getattr; allow vendor_init unlabeled:{ file dir