tango_core.te: Allow shell data file access to tango

avc: denied { search } for name="tmp" dev="sda45" ino=6782978
scontext=u:r:tango_core:s0:c512,c768
tcontext=u:object_r:shell_data_file:s0 tclass=dir permissive=1

avc: denied { read } for name="includes.txt" dev="sda45" ino=6782980
scontext=u:r:tango_core:s0:c512,c768
tcontext=u:object_r:shell_data_file:s0 tclass=file permissive=1

avc: denied { open } for path="/data/local/tmp/ajur/includes.txt"
dev="sda45" ino=6782980 scontext=u:r:tango_core:s0:c512,c768
tcontext=u:object_r:shell_data_file:s0 tclass=file permissive=1

BUG=63124901
Test: Tested tango cts

Change-Id: Idb6f1f37070652922924f7f948e7c05d4609f010
This commit is contained in:
Ranjith Kagathi Ananda
2017-07-20 17:06:37 -07:00
parent fc754502a7
commit 6935ce7f07

View File

@@ -5,6 +5,8 @@ app_domain(tango_core)
allow tango_core persist_file:dir search;
allow tango_core persist_sensors_file:dir search;
allow tango_core persist_sensors_file:file { getattr open read };
allow tango_core shell_data_file:dir search;
allow tango_core shell_data_file:file { open read };
allow tango_core qdsp_device:chr_file { ioctl open read };
allow tango_core vendor_file:file { getattr open read };