From 4b829da526193dfbbe62bdd4c543d008b37c0372 Mon Sep 17 00:00:00 2001
From: Tri Vo <trong@google.com>
Date: Mon, 23 Oct 2017 11:22:21 -0700
Subject: [PATCH] shell: grant access to /proc/version
Addresses this denial during CtsBionicTestCases:
avc: denied { getattr } for path="/proc/version" dev="proc"
ino=4026532359 scontext=u:r:shell:s0 tcontext=u:object_r:proc_version:s0
tclass=file permissive=0
Bug: 68067856
Test: cts-tradefed run commandAndExit cts -m CtsBionicTestCases
--skip-all-system-status-check --primary-abi-only --skip-preconditions
No more denials to /proc/version
Change-Id: I7e927fbaf1a8ce3637e09452cbd50f475176838e
---
public/shell.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/public/shell.te b/public/shell.te
index 44d812130..3ef14866c 100644
--- a/public/shell.te
+++ b/public/shell.te
@@ -115,6 +115,7 @@ allow shell proc_meminfo:file r_file_perms;
allow shell proc_modules:file r_file_perms;
allow shell proc_stat:file r_file_perms;
allow shell proc_timer:file r_file_perms;
+allow shell proc_version:file r_file_perms;
allow shell proc_zoneinfo:file r_file_perms;
r_dir_file(shell, cgroup)
allow shell domain:dir { search open read getattr };
--
GitLab