From 429e71a6089f2fc283b6a09dca60e4fb57a9f90d Mon Sep 17 00:00:00 2001
From: Dimitry Ivanov <dimitry@google.com>
Date: Thu, 10 Nov 2016 13:08:42 -0800
Subject: [PATCH] DO NOT MERGE: Allow getattr on rootfs:lnk_file for all
domains
Bug: http://b/32123312
Test: mm && boot
Change-Id: I6550fbe2bd5f9f5a474419b483b0f786d4025e88
---
domain.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/domain.te b/domain.te
index 45569de4c..06b9dc211 100644
--- a/domain.te
+++ b/domain.te
@@ -62,7 +62,7 @@ allow domain debuggerd:unix_stream_socket connectto;
# Root fs.
allow domain rootfs:dir search;
-allow domain rootfs:lnk_file read;
+allow domain rootfs:lnk_file { read getattr };
# Device accesses.
allow domain device:dir search;
--
GitLab