sepolicy: qti: Allow fsck to get attribute from sysfs file

type=1400 audit(0.0:7): avc:  denied  { getattr } for  path="/sys/devices/platform/soc/1d84000.ufshc/host0/target0:0:0/0:0:0:0/block/sda/sda16/partition" dev="sysfs" ino=60454 scontext=u:r:fsck:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
This commit is contained in:
sreeshankark
2023-10-21 19:21:54 +05:30
parent e2dc36f2c6
commit 182d42df95

View File

@@ -1,2 +1,4 @@
allow fsck self:capability { sys_admin kill }; allow fsck self:capability { sys_admin kill };
allow fsck sysfs:file getattr;
dontaudit fsck self:capability { dac_override dac_read_search }; dontaudit fsck self:capability { dac_override dac_read_search };