xiaomi-unicorn1/android_device_qcom_sepolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

legacy: allow apexd to write to sysfs_mmc_host

Browse Source 
As qualcomm relabels read_ahead_kb and friends as sysfs_mmc_host
we explicitly need to grant apexd access to it or it will break.

This results in eg GSIs to be unbootable.

type=1400 audit(3799551.036:40): avc: denied { read write }
  for comm="apexd" name="read_ahead_kb" dev="sysfs" ino=81305
  scontext=u:r:apexd:s0 tcontext=u:object_r:sysfs_mmc_host:s0
  tclass=file permissive=0

Change-Id: Iea24b94318893e8526e06e24bc3308acba37b0cc
Signed-off-by: Alexander Martinz <amartinz@shiftphones.com>
This commit is contained in:
Alexander Martinz
2022-10-17 19:02:58 +02:00
committed by Bruno Martins
parent f0f3f11097
commit 6aeeffc61d
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
legacy/vendor/common/apexd.te vendored Normal file
View File

@@ -0,0 +1,2 @@
# Allow apexd to configure read_ahead_kb
allow apexd sysfs_mmc_host:file rw_file_perms;