Allow init to access user mode helpers

This is in host sepolicy, looked like we pruned it because we didn't
need it - but now we do.

Bug: 297019386
Test: Run VM with encrypted storage, no denials
Change-Id: I6cd5f6bf98e9089ef7c3945c29242daea527592f
This commit is contained in:
Alan Stokes 2023-08-23 16:25:50 +01:00
parent d7ef12ca36
commit 3105e3ef43

View file

@ -57,6 +57,9 @@ allow init tmpfs:lnk_file { getattr read relabelfrom };
# setrlimit
allow init self:global_capability_class_set sys_resource;
# Set usermodehelpers.
allow init { usermodehelper sysfs_usermodehelper }:file rw_file_perms;
# Remove /dev/.booting and load /debug_ramdisk/* files
allow init tmpfs:file { getattr unlink };