Skip to content
Snippets Groups Projects
Commit bb96bffc authored by Colin Cross's avatar Colin Cross Committed by Nick Kralevich
Browse files

sepolicy: allow charger to read /sys/fs/pstore/console-ramoops

Addresses the denial in charger mode:
[   17.993733] type=1400 audit(1405412231.119:4): avc:  denied  { search } for  pid=123 comm="charger" name="/" dev="pstore" ino=10287 scontext=u:r:healthd:s0 tcontext=u:object_r:pstorefs:s0 tclass=dir permissive=0

Change-Id: I95e65753a99aa61ef86b8eebb7083b3d450e6b7b
parent 4644ac48
No related branches found
No related tags found
No related merge requests found
...@@ -22,6 +22,12 @@ allow healthd sysfs:file write; ...@@ -22,6 +22,12 @@ allow healthd sysfs:file write;
### healthd: charger mode ### healthd: charger mode
### ###
# Read /sys/fs/pstore/console-ramoops
# Don't worry about overly broad permissions for now, as there's
# only one file in /sys/fs/pstore
allow healthd pstorefs:dir r_dir_perms;
allow healthd pstorefs:file r_file_perms;
allow healthd graphics_device:dir r_dir_perms; allow healthd graphics_device:dir r_dir_perms;
allow healthd graphics_device:chr_file rw_file_perms; allow healthd graphics_device:chr_file rw_file_perms;
allow healthd input_device:dir r_dir_perms; allow healthd input_device:dir r_dir_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment