e712c3db12
The purpose of misc_writer is to write misc partition. However, when it includes libfstab, it will probe files like kernal command line (proc/cmdline) and metadata, which are permissions it does not need. Bug: 170189742 Test: Boot under permissive mode and find the errors gone. Change-Id: Icda3200660a3bee5cadb6f5e0026fa71941ae5dc
14 lines
618 B
Text
14 lines
618 B
Text
# vendor_misc_writer
|
|
type vendor_misc_writer, domain;
|
|
type vendor_misc_writer_exec, vendor_file_type, exec_type, file_type;
|
|
|
|
# Raw writes to misc_block_device
|
|
allow vendor_misc_writer misc_block_device:blk_file w_file_perms;
|
|
allow vendor_misc_writer block_device:dir r_dir_perms;
|
|
|
|
# Silence the denial when calling libfstab's ReadDefaultFstab, which tries to
|
|
# load DT fstab.
|
|
dontaudit vendor_misc_writer gsi_metadata_file:dir search;
|
|
dontaudit vendor_misc_writer proc_cmdline:file r_file_perms;
|
|
dontaudit vendor_misc_writer metadata_file:dir search;
|
|
dontaudit vendor_misc_writer sysfs_dt_firmware_android:dir search;
|