From 14a8a7f47c6feeb7b8bcf8b98d40a7cfaf3cce57 Mon Sep 17 00:00:00 2001 From: jhenrique09 Date: Thu, 1 Feb 2018 20:47:35 -0200 Subject: [PATCH] sanders: sepolicy: Fix adspd denial * Fix Ok Google 02-01 19:29:32.243 I/auditd ( 2567): type=1400 audit(0.0:18): avc: denied { read } for uid=10046 comm="earchbox:search" name="u:object_r:adspd_prop:s0" dev="tmpfs" ino=15433 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:adspd_prop:s0 tclass=file permissive=0 --- sepolicy/priv_app.te | 1 + 1 file changed, 1 insertion(+) diff --git a/sepolicy/priv_app.te b/sepolicy/priv_app.te index 6fd0852..e66c45c 100644 --- a/sepolicy/priv_app.te +++ b/sepolicy/priv_app.te @@ -2,3 +2,4 @@ allow priv_app device:dir r_dir_perms; allow priv_app persist_file:filesystem getattr; allow priv_app proc_interrupts:file { open read getattr }; allow priv_app proc_modules:file { open read getattr }; +get_prop(priv_app, adspd_prop); \ No newline at end of file