klte-common: sepolicy: Label sysfs_fingerprint, resolve denials

* avc: denied { setattr } for name="type_check" dev="sysfs" ino=28060 scontext=u:r:init:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 Change-Id: Ide1be660eaa005a7268161a4ab8d301b793ba062
2018-11-15 20:30:47 -07:00 · 2018-11-15 20:30:47 -07:00 · 933059f487
parent b5bfa3d797
commit 933059f487
3 changed files with 5 additions and 0 deletions
--- a/sepolicy/common/file.te
+++ b/sepolicy/common/file.te
@ -1 +1,2 @@
+type sysfs_fingerprint, fs_type, sysfs_type;
 type vfsspi_data_file, file_type, data_file_type;
--- a/sepolicy/common/file_contexts
+++ b/sepolicy/common/file_contexts
@ -11,3 +11,6 @@
 # sysfs - audio
 /sys/devices/[a-f0-9]+\.slim/es705-codec-gen0(/.*)?     u:object_r:sysfs_audio:s0
 /sys/kernel/DualWave/sound(/.*)?                        u:object_r:sysfs_audio:s0
+
+# sysfs - fingerprint
+/sys/devices/virtual/fingerprint(/.*)?                  u:object_r:sysfs_fingerprint:s0
--- a/sepolicy/common/init.te
+++ b/sepolicy/common/init.te
@ -0,0 +1 @@
+allow init sysfs_fingerprint:file setattr;