Skip to content
Snippets Groups Projects
  • Jerry Zhang's avatar
    f3b5bd64
    Add configfs file permissions to init. · f3b5bd64
    Jerry Zhang authored
    These were previously in device specific sepolicies.
    They should be in core sepolicy to reflect their
    use by a core init file, init.usb.configfs.rc.
    
    Addresses denial:
    
    init    : type=1400 audit(0.0:135): avc: denied { unlink } for name="f1"
    dev="configfs" ino=10923 scontext=u:r:init:s0
    tcontext=u:object_r:configfs:s0 tclass=lnk_file permissive=0
    
    Test: denial addressed
    Change-Id: I869892f9d0c311b727462fb380f4160feb986215
    f3b5bd64
    History
    Add configfs file permissions to init.
    Jerry Zhang authored
    These were previously in device specific sepolicies.
    They should be in core sepolicy to reflect their
    use by a core init file, init.usb.configfs.rc.
    
    Addresses denial:
    
    init    : type=1400 audit(0.0:135): avc: denied { unlink } for name="f1"
    dev="configfs" ino=10923 scontext=u:r:init:s0
    tcontext=u:object_r:configfs:s0 tclass=lnk_file permissive=0
    
    Test: denial addressed
    Change-Id: I869892f9d0c311b727462fb380f4160feb986215