Skip to content
Snippets Groups Projects
Commit 9a28f90d authored by Sylvain Chouleur's avatar Sylvain Chouleur
Browse files

init: allow to access console-ramoops with newer kernels


Since linux 3.18, commit 68c4a4f8abc60c9440ede9cd123d48b78325f7a3 has
been integrated and requires syslog_read capability a process accessing
console-ramoops file.

sepolicy must be adapted to this new requirement.

Change-Id: Ib4032a6bd96b1828a0154edc8fb510e3c1d3bdc2
Signed-off-by: default avatarSylvain Chouleur <sylvain.chouleur@intel.com>
parent be0616ba
No related branches found
No related tags found
No related merge requests found
...@@ -266,6 +266,7 @@ allow init metadata_block_device:blk_file rw_file_perms; ...@@ -266,6 +266,7 @@ allow init metadata_block_device:blk_file rw_file_perms;
# by dm-verity detecting corrupted blocks # by dm-verity detecting corrupted blocks
allow init pstorefs:dir search; allow init pstorefs:dir search;
allow init pstorefs:file r_file_perms; allow init pstorefs:file r_file_perms;
allow init kernel:system syslog_read;
# linux keyring configuration # linux keyring configuration
allow init init:key { write search setattr }; allow init init:key { write search setattr };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment