Skip to content
Snippets Groups Projects
Commit 509186de authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Allow fsck to search /dev/block.


Addresses denials such as:
avc:  denied  { search } for  pid=143 comm="e2fsck" name="block" dev="tmpfs" ino=5987 scontext=u:r:fsck:s0 tcontext=u:object_r:block_device:s0 tclass=dir

Change-Id: Ieb72fc5e28146530c2f3b235ce74f2f397e49c56
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent f6cc34e0
No related branches found
No related tags found
No related merge requests found
......@@ -12,6 +12,7 @@ allow fsck tmpfs:chr_file { read write ioctl };
allow fsck devpts:chr_file { read write ioctl getattr };
# Run e2fsck on block devices.
allow fsck block_device:dir search;
allow fsck userdata_block_device:blk_file rw_file_perms;
allow fsck cache_block_device:blk_file rw_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment