tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow recovery to read /proc/cmdline

Browse source 
avc:  denied  { read } for  pid=446 comm="recovery" name="cmdline"
dev="proc" scontext=u:r:recovery:s0
tcontext=u:object_r:proc_cmdline:s0 tclass=file

Test: build
Bug: 66497047
Change-Id: I9f48db88bed0d6ac76fa2808a4913857230a5d4b
This commit is contained in:
Jeff Vander Stoep 2017-09-29 12:34:14 -07:00 committed by Jeffrey Vander Stoep
parent 2f6e66ff09
commit e629b7eb2d
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
public/recovery.te
View file

@ -134,6 +134,8 @@ recovery_only(`
# This line seems suspect, as it should not really need to
# set scheduling parameters for a kernel domain task.
allow recovery kernel:process setsched;
allow recovery proc_cmdline:file r_file_perms;
')
###