From 635f471c267164d78816f58d3158b5eaed9bb0e9 Mon Sep 17 00:00:00 2001 From: Nolen Johnson Date: Tue, 26 Feb 2019 00:20:02 +0000 Subject: [PATCH] PL2: sepolicy: Allow NFC data_vendor_file create_file_perms [ 122.255232] type=1400 audit(1601962129.363:31): avc: denied { create } for comm=4173796E635461736B202331 name="nfaStorage.bin1" scontext=u:r:nfc:s0 tcontext=u:object_r:nfc_vendor_data_file:s0 tclass=file permissive=1 [ 150.239587] type=1400 audit(1601962129.363:32): avc: denied { write open } for comm=4173796E635461736B202331 path="/data/vendor/nfc/nfaStorage.bin1" dev="mmcblk0p85" ino=787067 scontext=u:r:nfc:s0 tcontext=u:object_r:nfc_vendor_data_file:s0 tclass=file permissive=1 Change-Id: I8d4005c6b339876a3a20cba9f9ca0102a647a5d7 --- sepolicy/vendor/nfc.te | 1 + 1 file changed, 1 insertion(+) diff --git a/sepolicy/vendor/nfc.te b/sepolicy/vendor/nfc.te index e6fee85..9e3f1e8 100644 --- a/sepolicy/vendor/nfc.te +++ b/sepolicy/vendor/nfc.te @@ -1 +1,2 @@ allow nfc nfc_vendor_data_file:dir { rw_dir_perms }; +allow nfc nfc_vendor_data_file:file { create_file_perms };