0ad2de5eab
This addresses the denial to /dev/cpuset/tasks:
update_verifier: type=1400 audit(0.0:377): avc: denied { dac_override }
for capability=1 scontext=u:r:update_verifier:s0
tcontext=u:r:update_verifier:s0 tclass=capability permissive=1
update_verifier: type=1400 audit(0.0:378): avc: granted { write } for
name="tasks" dev="cgroup" ino=5 scontext=u:r:update_verifier:s0
tcontext=u:object_r:cgroup:s0 tclass=file
Bug: 37358323
Test: denial message gone after adding system group
Change-Id: I66b4925295a13fbc1c6f26a1bb9bd2f9cebcec3d
11 lines
287 B
Text
11 lines
287 B
Text
service update_verifier_nonencrypted /system/bin/update_verifier nonencrypted
|
|
user root
|
|
group cache system
|
|
priority -20
|
|
ioprio rt 0
|
|
|
|
service update_verifier /system/bin/update_verifier ${vold.decrypt}
|
|
user root
|
|
group cache system
|
|
priority -20
|
|
ioprio rt 0
|