diff --git a/system_server.te b/system_server.te index e85281cda3232736081b6c855a49ff7347dbbd90..7a8979a900f5a8713cc2c8ea03f9e427966cd218 100644 --- a/system_server.te +++ b/system_server.te @@ -274,6 +274,12 @@ read_logd(system_server) # /sys/module/lowmemorykiller/parameters/minfree allow system_server sysfs_lowmemorykiller:file { getattr w_file_perms }; +# Read /sys/fs/pstore/console-ramoops +# Don't worry about overly broad permissions for now, as there's +# only one file in /sys/fs/pstore +allow system_server pstorefs:dir r_dir_perms; +allow system_server pstorefs:file r_file_perms; + ### ### Neverallow rules ###