From a83fc379c68d0cad9bd590fb1bfd9d04f8f250fc Mon Sep 17 00:00:00 2001
From: James Carter <jwcart2@tycho.nsa.gov>
Date: Fri, 13 Apr 2012 13:35:21 -0400
Subject: [PATCH] Added policy to allow SEAndroidManager to read AVC messages.

---
 system.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/system.te b/system.te
index 6466e9664..6389b0ee1 100644
--- a/system.te
+++ b/system.te
@@ -34,6 +34,10 @@ selinux_setenforce(system_app)
 
 # Allow settings app to set SELinux booleans
 selinux_setbool(system_app)
+
+# Allow settings app to read syslog to display AVC messages
+allow system_app kernel:system syslog_read;
+
 }
 
 #
-- 
GitLab