From aed3c1f464574aa653ae9dcbe9ffb946236fc88d Mon Sep 17 00:00:00 2001 From: SamarV-121 Date: Thu, 15 Jul 2021 23:19:43 +0530 Subject: [PATCH] universal7885: sepolicy: Allow kernel to read sysfs_virtual nodes `avc: denied { read } for name="hall_detect" dev="sysfs" ino=29566 scontext=u:r:kernel:s0 tcontext=u:object_r:sysfs_virtual:s0 tclass=file permissive=0` Signed-off-by: SamarV-121 Change-Id: I8fb01d8c4ce8b48fbf58a0688b04dc79664d2964 --- sepolicy/vendor/kernel.te | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sepolicy/vendor/kernel.te b/sepolicy/vendor/kernel.te index a144f38..29d0781 100644 --- a/sepolicy/vendor/kernel.te +++ b/sepolicy/vendor/kernel.te @@ -7,5 +7,6 @@ allow kernel device:chr_file { getattr setattr unlink create }; allow kernel device:dir create_dir_perms; allow kernel self:capability { sys_rawio mknod }; -allow kernel sysfs_virtual:dir search; allow kernel block_device:dir search; + +r_dir_file(kernel, sysfs_virtual)