From a10f01b72fa79253072f84f11cc86ebf6db65b56 Mon Sep 17 00:00:00 2001 From: Wei Wang <wvw@google.com> Date: Sun, 5 Mar 2017 21:53:39 -0800 Subject: [PATCH] init.te: only allow wifi tracing restorecon twice Bug: 35979722 Test: angler boot with UART on and set sys.wifitracing.started to 0 after boot Test: no more avc errors on debugfs Change-Id: I91d98428aaec915b3206535559a0c096e6de1603 --- public/init.te | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/public/init.te b/public/init.te index 9ec9ff3cc..4b080464b 100644 --- a/public/init.te +++ b/public/init.te @@ -181,8 +181,8 @@ allow init { allow init cache_file:lnk_file r_file_perms; allow init { file_type -system_file -exec_type }:dir_file_class_set relabelto; -allow init { sysfs_type debugfs_type}:{ dir file lnk_file } { getattr relabelfrom }; -allow init { sysfs_type debugfs_type }:{ dir file lnk_file } relabelto; +allow init { sysfs debugfs debugfs_tracing }:{ dir file lnk_file } { getattr relabelfrom }; +allow init { sysfs_type debugfs_type }:{ dir file lnk_file } { relabelto getattr }; allow init dev_type:dir create_dir_perms; allow init dev_type:lnk_file create; -- GitLab