sm7250-common: sepolicy: Allow ioctl to zram_swap for performance

This fixes permission denied when setting F2FS_PIN_FILE.

[   46.726131] init: [libfs_mgr]Failed to set pin_file for f2fs: /data/per_boot/zram_swap: Permission denied
[   46.726151] init: [libfs_mgr]Failure of zram backing device file for '/dev/block/zram0'
[   46.726341] type=1400 audit(1601025878.312:17): avc: denied { ioctl } for comm="init" path="/data/per_boot/zram_swap" dev="dm-9" ino=4868 ioctlcmd=0xf50d scontext=u:r:init:s0 tcontext=u:object_r:per_boot_file:s0 tclass=file permissive=0

Bug: 169311165
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
Change-Id: I982f70556284ac55d659bae6aff93b84d71e67f0
Signed-off-by: aswin7469 <aswinas@pixysos.com>
Signed-off-by: Sandeep P S <sandymankara11@gmail.com>
This commit is contained in:
Jaegeuk Kim
2020-09-24 05:56:02 -07:00
committed by Sandeep P S
parent fa6ee90f23
commit c194818165

6
sepolicy/vendor/init.te vendored Normal file
View File

@@ -0,0 +1,6 @@
allow init vendor_data_file:file lock;
allow init hal_audio_default:binder call;
allow init platform_app:binder call;
allow init per_boot_file:file ioctl;
allowxperm init per_boot_file:file ioctl { F2FS_IOC_SET_PIN_FILE };