Skip to content
Snippets Groups Projects
Commit cee72924 authored by dcashman's avatar dcashman
Browse files

Allow domain to read symlinks in /sys.

Address the following denial:
avc: denied { read } for name="battery" dev="sysfs" ino=17945 scontext=u:r:shell:s0 tcontext=u:object_r:sysfs:s0 tclass=lnk_file permissive=0

Bug: 26219114
Change-Id: I862b40a6514bffaa455dd7f06368acf9bcdc4782
parent dc37ea73
No related branches found
No related tags found
No related merge requests found
...@@ -96,6 +96,9 @@ allow domain system_file:dir { search getattr }; ...@@ -96,6 +96,9 @@ allow domain system_file:dir { search getattr };
allow domain system_file:file { execute read open getattr }; allow domain system_file:file { execute read open getattr };
allow domain system_file:lnk_file read; allow domain system_file:lnk_file read;
# read any sysfs symlinks
allow domain sysfs:lnk_file read;
# libc references /data/misc/zoneinfo for timezone related information # libc references /data/misc/zoneinfo for timezone related information
r_dir_file(domain, zoneinfo_data_file) r_dir_file(domain, zoneinfo_data_file)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment