tama-common: sepolicy: Fix isolated_app denial
[ 246.285320] type=1400 audit(1662729263.666:7887): avc: denied { setattr } for comm="ThreadPoolForeg" name="crs.pb" dev="sda73" ino=39478 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0
[ 246.285658] type=1400 audit(1662729263.670:7888): avc: denied { setattr } for comm="ThreadPoolForeg" name="ct_config.pb" dev="sda73" ino=26375 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0
[ 246.286498] type=1400 audit(1662729263.670:7889): avc: denied { setattr } for comm="ThreadPoolForeg" name="kp_pinslist.pb" dev="sda73" ino=34892 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0
[ 246.287160] type=1400 audit(1662729263.670:7890): avc: denied { setattr } for comm="ThreadPoolForeg" name="manifest.json" dev="sda73" ino=34899 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0
[ 246.289090] type=1400 audit(1662729263.674:7891): avc: denied { setattr } for comm="ThreadPoolForeg" name="verified_contents.json" dev="sda73" ino=43171 scontext=u:r:isolated_app:s0:c512,c768 tcontext=u:object_r:app_data_file:s0:c253,c256,c512,c768 tclass=file permissive=0
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
This commit is contained in:
parent
1731a343b7
commit
4a48eda5d3
1 changed files with 1 additions and 0 deletions
1
sepolicy/vendor/isolated_app.te
vendored
Normal file
1
sepolicy/vendor/isolated_app.te
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
allow isolated_app app_data_file:file { setattr };
|
||||
Loading…
Reference in a new issue