From 9fe4e7b8525d9a4228ac91aa159d5f8223906d2a Mon Sep 17 00:00:00 2001 From: Stephen Smalley <sds@tycho.nsa.gov> Date: Mon, 13 Jan 2014 15:32:11 -0500 Subject: [PATCH] ashmem_device is a character device, not a regular file. Change-Id: Ie3d73d2c8d5c73e8bd359123f6fd3c006f332323 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> --- recovery.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recovery.te b/recovery.te index 31c92c556..eb2a2b0ae 100644 --- a/recovery.te +++ b/recovery.te @@ -8,5 +8,5 @@ allow recovery {fs_type dev_type -kmem_device file_type}:dir_file_class_set rela allow recovery unlabeled:filesystem mount; allow recovery self:process execmem; -allow recovery ashmem_device:file execute; +allow recovery ashmem_device:chr_file execute; allow recovery tmpfs:file rx_file_perms; -- GitLab