sepolicy: add support for new tracefs am: 4dafa72ac9
am: 0b26e99b68
* commit '0b26e99b6870dc6ae5b9bc146b83c9537f9a5dc1':
sepolicy: add support for new tracefs
Change-Id: I9189f98cb7cff87c412c7b3e09030c723b70abd7
This commit is contained in:
commit
6b2d897822
3 changed files with 3 additions and 2 deletions
2
file.te
2
file.te
|
@ -230,7 +230,7 @@ type property_contexts, file_type;
|
|||
# Allow files to be created in their appropriate filesystems.
|
||||
allow fs_type self:filesystem associate;
|
||||
allow sysfs_type sysfs:filesystem associate;
|
||||
allow debugfs_type debugfs:filesystem associate;
|
||||
allow debugfs_type { debugfs debugfs_tracing }:filesystem associate;
|
||||
allow file_type labeledfs:filesystem associate;
|
||||
allow file_type tmpfs:filesystem associate;
|
||||
allow file_type rootfs:filesystem associate;
|
||||
|
|
|
@ -34,6 +34,7 @@ genfscon sysfs / u:object_r:sysfs:s0
|
|||
genfscon inotifyfs / u:object_r:inotify:s0
|
||||
genfscon vfat / u:object_r:vfat:s0
|
||||
genfscon debugfs / u:object_r:debugfs:s0
|
||||
genfscon tracefs / u:object_r:debugfs_tracing:s0
|
||||
genfscon fuse / u:object_r:fuse:s0
|
||||
genfscon configfs / u:object_r:configfs:s0
|
||||
genfscon sdcardfs / u:object_r:sdcardfs:s0
|
||||
|
|
2
init.te
2
init.te
|
@ -160,7 +160,7 @@ allow init {
|
|||
}:lnk_file { create getattr setattr relabelfrom unlink };
|
||||
|
||||
allow init {file_type -system_file -exec_type}:dir_file_class_set relabelto;
|
||||
allow init { sysfs debugfs }:{ dir file lnk_file } { getattr relabelfrom };
|
||||
allow init { sysfs debugfs debugfs_tracing }:{ dir file lnk_file } { getattr relabelfrom };
|
||||
allow init { sysfs_type debugfs_type }:{ dir file lnk_file } relabelto;
|
||||
allow init dev_type:dir create_dir_perms;
|
||||
allow init dev_type:lnk_file create;
|
||||
|
|
Loading…
Reference in a new issue