Add selinux policy for ext4 fs-verity feature

avc: denied { read } for comm="init" name="verity" dev="sysfs" ino=44746
scontext=u:r:init:s0 tcontext=u:object_r:sysfs_fs_ext4_features:s0 tclass=file
permissive=0

Bug: 117437571
Test: bootable for phone projects
Change-Id: I4c53e03ec55c2064f1b23c0cbd0302de3f8aa38e
This commit is contained in:
Leo Liou 2019-01-15 20:38:32 +08:00
parent 1bbda7e662
commit 51373ec7a3

View file

@ -356,6 +356,7 @@ allow init {
allow init {
sysfs_dt_firmware_android
sysfs_fs_ext4_features
}:file r_file_perms;
allow init {