diff --git a/prebuilts/api/28.0/public/ueventd.te b/prebuilts/api/28.0/public/ueventd.te index c41adb35d8f25eaef9c0d4ad2adca3d07dbad5b4..9b9eacb252a23d237e17a6e43db4b114799d86fc 100644 --- a/prebuilts/api/28.0/public/ueventd.te +++ b/prebuilts/api/28.0/public/ueventd.te @@ -36,6 +36,9 @@ allow ueventd file_contexts_file:file r_file_perms; # Use setfscreatecon() to label /dev directories and files. allow ueventd self:process setfscreate; +# Allow ueventd to read androidboot.android_dt_dir from kernel cmdline. +allow ueventd proc_cmdline:file r_file_perms; + ##### ##### neverallow rules ##### diff --git a/public/ueventd.te b/public/ueventd.te index c41adb35d8f25eaef9c0d4ad2adca3d07dbad5b4..9b9eacb252a23d237e17a6e43db4b114799d86fc 100644 --- a/public/ueventd.te +++ b/public/ueventd.te @@ -36,6 +36,9 @@ allow ueventd file_contexts_file:file r_file_perms; # Use setfscreatecon() to label /dev directories and files. allow ueventd self:process setfscreate; +# Allow ueventd to read androidboot.android_dt_dir from kernel cmdline. +allow ueventd proc_cmdline:file r_file_perms; + ##### ##### neverallow rules #####