Piteball/android_device_samsung_klte-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

klte-common: sepolicy: Label sysfs_fingerprint, resolve denials

Browse source 
* avc: denied { setattr } for name="type_check" dev="sysfs" ino=28060
  scontext=u:r:init:s0 tcontext=u:object_r:sysfs:s0 tclass=file
  permissive=0

Change-Id: Ide1be660eaa005a7268161a4ab8d301b793ba062
This commit is contained in:
Kevin F. Haggerty 2018-11-15 20:30:47 -07:00
parent b5bfa3d797
commit 933059f487
No known key found for this signature in database
GPG key ID: 6D95512933112729
3 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
sepolicy/common/file.te
View file

@ -1 +1,2 @@
type sysfs_fingerprint, fs_type, sysfs_type;
type vfsspi_data_file, file_type, data_file_type;

3
sepolicy/common/file_contexts
View file

@ -11,3 +11,6 @@
# sysfs - audio
/sys/devices/[a-f0-9]+\.slim/es705-codec-gen0(/.*)? u:object_r:sysfs_audio:s0
/sys/kernel/DualWave/sound(/.*)? u:object_r:sysfs_audio:s0
# sysfs - fingerprint
/sys/devices/virtual/fingerprint(/.*)? u:object_r:sysfs_fingerprint:s0

1
sepolicy/common/init.te Normal file
View file

@ -0,0 +1 @@
allow init sysfs_fingerprint:file setattr;