Skip to content
Snippets Groups Projects
Commit 4d19f98c authored by Daichi Hirono's avatar Daichi Hirono Committed by Nick Kralevich
Browse files

Add mlstrustedobject to appfuse object type.

To write bytes to appfuse file from priv_app, we need to specify
mlstrustedobject.
The CL fixes the following denial.

type=1400 audit(0.0:77): avc: denied { write } for name="10" dev="fuse" ino=10 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:app_fuse_file:s0 tclass=file permissive=0

BUG=23093747

Change-Id: I9901033bb3349d5def0bd7128db45a1169856dc1
parent 0144eedb
No related branches found
No related tags found
No related merge requests found
......@@ -181,7 +181,7 @@ type bluetooth_efs_file, file_type;
# Type for fingerprint template file.
type fingerprintd_data_file, file_type, data_file_type;
# Type for appfuse file.
type app_fuse_file, file_type, data_file_type;
type app_fuse_file, file_type, data_file_type, mlstrustedobject;
# Socket types
type adbd_socket, file_type;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment