Fix zram avc denied

Bug: 205657025
Bug: 205657090
Bug: 205779799
Test: boot to home
Signed-off-by: Randall Huang <huangrandall@google.com>
Change-Id: Ib23d40c2f9e96680108311d23aca708a8db4b67b
This commit is contained in:
Randall Huang
2021-11-16 17:00:13 +08:00
committed by TreeHugger Robot
parent fded60a79e
commit 895dfe3008
4 changed files with 4 additions and 18 deletions

View File

@@ -1,2 +0,0 @@
# b/205657025
dontaudit init ram_device:blk_file { write };

View File

@@ -1,15 +0,0 @@
# b/205657090
dontaudit toolbox ram_device:blk_file { getattr };
dontaudit toolbox ram_device:blk_file { ioctl };
dontaudit toolbox ram_device:blk_file { open };
dontaudit toolbox ram_device:blk_file { read write };
# b/205779799
dontaudit toolbox per_boot_file:dir { getattr };
dontaudit toolbox per_boot_file:dir { open };
dontaudit toolbox per_boot_file:dir { read };
dontaudit toolbox per_boot_file:dir { remove_name };
dontaudit toolbox per_boot_file:dir { rmdir };
dontaudit toolbox per_boot_file:dir { search };
dontaudit toolbox per_boot_file:dir { write };
dontaudit toolbox per_boot_file:file { getattr };
dontaudit toolbox per_boot_file:file { unlink };

View File

@@ -13,4 +13,4 @@ allow init boot_block_device:lnk_file relabelto;
allow init persist_file:dir mounton;
allow init modem_efs_file:dir mounton;
allow init modem_userdata_file:dir mounton;
allow init ram_device:blk_file w_file_perms;

View File

@@ -0,0 +1,3 @@
allow toolbox ram_device:blk_file rw_file_perms;
allow toolbox per_boot_file:dir create_dir_perms;
allow toolbox per_boot_file:file create_file_perms;