From bbf7d257b1295b67fed6ac602171ee0da8e2010b Mon Sep 17 00:00:00 2001
From: Elliott Hughes <enh@google.com>
Date: Thu, 11 Aug 2016 09:16:39 -0700
Subject: [PATCH] Fix init's restorecon of /dev/kmsg.
Bug: http://b/30699558
Change-Id: Id9b213967ab290f45d1b8a5ab6712845ac9a0b69
Merged-In: Id9b213967ab290f45d1b8a5ab6712845ac9a0b69
---
init.te | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/init.te b/init.te
index ff029ab78..425aebc81 100644
--- a/init.te
+++ b/init.te
@@ -11,12 +11,15 @@ allow init tmpfs:chr_file create_file_perms;
#
# init direct restorecon calls.
#
-# /dev/socket
-allow init { device socket_device }:dir relabelto;
+# /dev/kmsg
+allow init tmpfs:chr_file relabelfrom;
+allow init kmsg_device:chr_file { write relabelto };
# /dev/__properties__
allow init properties_device:dir relabelto;
allow init properties_serial:file { write relabelto };
allow init property_type:file { create_file_perms relabelto };
+# /dev/socket
+allow init { device socket_device }:dir relabelto;
# setrlimit
allow init self:capability sys_resource;
--
GitLab