Files
device_google_walleye/sepolicy/system_server.te
Max Bires 7e1e794bdf Adding search dir permission to system_server.
Added allow rule to address following bootup denial:
denied { search } for pid=3491 comm="system-server-i" name="sensors"
dev="sdd3" ino=16 scontext=u:r:system_server:s0
tcontext=u:object_r:persist_sensors_file:s0 tclass=dir

Bug: 34784662
Test: Above denial no longer appears in denial logs
Change-Id: Id2a42d3dff150cd7e6f1120902d4d41f0e34e626
2017-02-14 18:00:32 -08:00

6 lines
217 B
Plaintext

allow system_server self:socket ioctl;
allowxperm system_server self:socket ioctl msm_sock_ipc_ioctls;
allow system_server persist_sensors_file:file r_file_perms;
allow system_server persist_sensors_file:dir search;