From 601b5ef5aab76d3649ff35d2660f4532050c4174 Mon Sep 17 00:00:00 2001 From: SamarV-121 Date: Fri, 13 Aug 2021 22:00:56 +0530 Subject: [PATCH] universal7885: sepolicy: Allow tee to write efs_file `W McDaemon.FSD2: type=1400 audit(0.0:98): avc: denied { write } for name="Store_1.tf" dev="mmcblk0p3" ino=28 scontext=u:r:tee:s0 tcontext=u:object_r:efs_file:s0 tclass=file permissive=0` `I TeeMcDaemon: create: Create storage file "/mnt/vendor/efs/TEE/Store_1.tf" [hardware/samsung_slsi/exynos7885/mobicore/Daemon/src/FSD2.cpp:129]` `E TeeMcDaemon: creating storage file failed with "Permission denied"(errno 13) [hardware/samsung_slsi/exynos7885/mobicore/Daemon/src/FSD2.cpp:144]` Change-Id: I5f82cf2a25ed32203734b2f80aa041e99c66f17f Signed-off-by: SamarV-121 --- sepolicy/vendor/tee.te | 1 + 1 file changed, 1 insertion(+) diff --git a/sepolicy/vendor/tee.te b/sepolicy/vendor/tee.te index 67f1585..e769681 100644 --- a/sepolicy/vendor/tee.te +++ b/sepolicy/vendor/tee.te @@ -1,4 +1,5 @@ allow tee efs_file:dir r_dir_perms; +allow tee efs_file:file rw_file_perms; allow tee mnt_vendor_file:dir search; dontaudit tee system_prop:property_service set;