From c01abf68d7cd84698a1aa6ce940ae6ef5170c6ec Mon Sep 17 00:00:00 2001 From: SamarV-121 Date: Fri, 16 Jul 2021 15:21:37 +0530 Subject: [PATCH] universal7885: sepolicy: Label /mnt/vendor/cpefs `W vold : Failed to open /mnt/vendor/cpefs: Permission denied` `I auditd : type=1400 audit(0.0:78): avc: denied { read } for comm="Binder:3484_2" name="/" dev="mmcblk0p4" ino=2 scontext=u:r:vold:s0 tcontext=u:object_r:mnt_vendor_file:s0 tclass=dir permissive=0` Change-Id: Id8a194322977d4a697dd525df27f1b1a691a2475 Signed-off-by: SamarV-121 --- sepolicy/vendor/file_contexts | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts index b1acc26..f9c8293 100644 --- a/sepolicy/vendor/file_contexts +++ b/sepolicy/vendor/file_contexts @@ -1,6 +1,5 @@ #################################### # Devices -/cpefs(/.*)? u:object_r:efs_file:s0 /dev/mali[0-9]* u:object_r:gpu_device:s0 /dev/umts_ipc0 u:object_r:radio_device:s0 /dev/fimg2d u:object_r:video_device:s0 @@ -34,7 +33,10 @@ /dev/block/platform/.+/by-name/(persistent|PERSISTENT)? u:object_r:frp_block_device:s0 #################################### -# efs files +# efs +/cpefs(/.*)? u:object_r:efs_file:s0 +/mnt/vendor/cpefs(/.*)? u:object_r:efs_file:s0 + /efs/FactoryApp(/.*)? u:object_r:app_efs_file:s0 /efs/FactoryApp/baro_delta u:object_r:baro_delta_factoryapp_efs_file:s0 /efs/FactoryApp/factorymode u:object_r:factorymode_factoryapp_efs_file:s0