sepolicy: qti: Allow fsck to get attribute from sysfs file
type=1400 audit(0.0:7): avc: denied { getattr } for path="/sys/devices/platform/soc/1d84000.ufshc/host0/target0:0:0/0:0:0:0/block/sda/sda16/partition" dev="sysfs" ino=60454 scontext=u:r:fsck:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
This commit is contained in:
2
sepolicy/qti/vendor/fsck.te
vendored
2
sepolicy/qti/vendor/fsck.te
vendored
@@ -1,2 +1,4 @@
|
|||||||
allow fsck self:capability { sys_admin kill };
|
allow fsck self:capability { sys_admin kill };
|
||||||
|
allow fsck sysfs:file getattr;
|
||||||
|
|
||||||
dontaudit fsck self:capability { dac_override dac_read_search };
|
dontaudit fsck self:capability { dac_override dac_read_search };
|
||||||
|
|||||||
Reference in New Issue
Block a user