diff --git a/microdroid/system/private/microdroid_manager.te b/microdroid/system/private/microdroid_manager.te index ac92f38fd..399330f13 100644 --- a/microdroid/system/private/microdroid_manager.te +++ b/microdroid/system/private/microdroid_manager.te @@ -111,6 +111,9 @@ allow microdroid_manager serial_device:chr_file w_file_perms; # Allow microdroid_manager to handle extra_apks allow microdroid_manager extra_apk_file:dir create_dir_perms; +# Allow microdroid_manager to write kmsg_debug (stdio_to_kmsg). +allow microdroid_manager kmsg_debug_device:chr_file w_file_perms; + # Domains other than microdroid can't write extra_apks neverallow { domain -microdroid_manager -init -vendor_init } extra_apk_file:file no_w_file_perms; neverallow { domain -microdroid_manager -init -vendor_init } extra_apk_file:dir no_w_dir_perms;