From 08f01a335dbf98778ef443e504d975857607d439 Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Fri, 12 Jul 2013 15:38:41 -0700
Subject: [PATCH] debuggerd.te: Fix relabelto policy denial
In 0c9708b2af4ea345277a47ae7bc1ce890e90d2bc, we removed relabelto
from unconfined.te. This broke debuggerd. Fixed.
type=1400 audit(1373668537.550:5): avc: denied { relabelto } for pid=44 comm="debuggerd" name="tombstones" dev="mtdblock1" ino=71 scontext=u:r:debuggerd:s0 tcontext=u:object_r:tombstone_data_file:s0 tclass=dir
Change-Id: Ic025cbc030d6e776d9d87b1df3240fdc5f0b53d5
---
debuggerd.te | 2 ++
1 file changed, 2 insertions(+)
diff --git a/debuggerd.te b/debuggerd.te
index f78b9028c..31453c9ce 100644
--- a/debuggerd.te
+++ b/debuggerd.te
@@ -5,3 +5,5 @@ type debuggerd_exec, exec_type, file_type;
init_daemon_domain(debuggerd)
unconfined_domain(debuggerd)
+relabelto_domain(debuggerd)
+allow debuggerd tombstone_data_file:dir relabelto;
--
GitLab