tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix init error trying to access file.

Browse source 
Init tries to write /proc/sys/vm/min_free_order_shift but fails due to
a SELinux denial.  This gives the file a new label and gives init the
ability to write it.

Test: Build and booted Sailfish (a couple of days ago).
Change-Id: Ic93862b85c468afccff2019d84b927af9ed2a84d
This commit is contained in:
Joel Galenson 2018-01-23 17:32:16 -08:00
parent 869a4c2e19
commit cf391269ac
4 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/26.0/26.0.cil
View file

@ -466,6 +466,7 @@
proc_kmsg
proc_loadavg
proc_max_map_count
proc_min_free_order_shift
proc_mounts
proc_page_cluster
proc_pagetypeinfo

1
private/genfs_contexts
View file

@ -66,6 +66,7 @@ genfscon proc /sys/vm/mmap_rnd_compat_bits u:object_r:proc_security:s0
genfscon proc /sys/vm/page-cluster u:object_r:proc_page_cluster:s0
genfscon proc /sys/vm/drop_caches u:object_r:proc_drop_caches:s0
genfscon proc /sys/vm/overcommit_memory u:object_r:proc_overcommit_memory:s0
genfscon proc /sys/vm/min_free_order_shift u:object_r:proc_min_free_order_shift:s0
genfscon proc /timer_list u:object_r:proc_timer:s0
genfscon proc /timer_stats u:object_r:proc_timer:s0
genfscon proc /tty/drivers u:object_r:proc_tty_drivers:s0

1
public/file.te
View file

@ -8,6 +8,7 @@ type proc, fs_type;
type proc_security, fs_type;
type proc_drop_caches, fs_type;
type proc_overcommit_memory, fs_type;
type proc_min_free_order_shift, fs_type;
# proc, sysfs, or other nodes that permit configuration of kernel usermodehelpers.
type usermodehelper, fs_type;
type sysfs_usermodehelper, fs_type, sysfs_type;

1
public/init.te
View file

@ -287,6 +287,7 @@ allow init {
proc_extra_free_kbytes
proc_net
proc_max_map_count
proc_min_free_order_shift
proc_overcommit_memory
proc_panic
proc_page_cluster